Allow authing using repo-scoped token

ffddorf · Apr 27, 2024 · be0b2dd · be0b2dd
1 parent 6d9afc5
commit be0b2dd
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/pkg/auth/github/pat.go b/pkg/auth/github/pat.go
@@ -48,6 +48,13 @@ type identity struct {
 }
 
 func (pa *PATAuthenticator) Authenticate(secret string, s *terraform.State) (bool, error) {
+	// check access to repo that matches project in org
+	_, err := makeRequest(fmt.Sprintf("https://api.github.com/repos/%s/%s", pa.org, s.Project), secret)
+	if err == nil {
+		// allow when there is no error
+		return true, nil
+	}
+
 	// check if org matches username
 	resp, err := makeRequest("https://api.github.com/user", secret)
 	if err != nil {