Authenticate with GitHub App

[joebowbeer]

Is it possible to use GitHub App authentication?

It is preferable to PAT auth

https://docs.github.com/en/enterprise-cloud@latest/apps/creating-github-apps/about-creating-github-apps/deciding-when-to-build-a-github-app#choosing-between-a-github-app-or-a-personal-access-token

[bluebrown]

Hi, we have already looked into that, and may want to add it. There is some caveats though:

• auth mechanism needs to be able to interact with the rest api for pull requests i.e. see https://docs.github.com/en/enterprise-cloud@latest/apps/creating-github-apps/authenticating-with-a-github-app/generating-an-installation-access-token-for-a-github-app
• github apps are very specific to github, so we cant use a generalized implementation

So, I wouldnt mind to add that feature. If I find the bandwidth I might look into it. Otherwise, pull requests are always welcome.

[bluebrown]

Hi @joebowbeer, I have released a new version of kobold with plugin support. Potentially, you could do github auth using a starlark. You can have a look here https://github.com/bluebrown/kobold?tab=readme-ov-file#extending-kobold.

[bluebrown]

this probably requires to expose some crypto functionality to the post hooks, so they can do stuff like certificates. Currently only this is exposed https://github.com/qri-io/starlib