alexbakker / github-artifact-proxy Goto Github PK

https://github.com/KOLANICH-libs/miniGHAPI.py/blob/master/miniGHAPI/undocumented.py

They use dictionaries within json. These ones were recovered mostly from mitmproxy dumps (one can try fork https://github.com/KOLANICH-GHActions/mitmproxy and experiment on it), but I suspect that there can be other keys in them controlling the way files are served to users.

Hey there, great project!

I was in need for something similar, but I need to run this on kubernetes, with some additional requirements, so I created a fork with a docker publish pipeline and some changes around config handling.

The main thing is that I use a config "framework" to load the config so that I can pass the complete config via an ENV var and then enrich that config via other env vars. This is so that the additional env vars can come from vault, setting the tokens and the rest of the config can be deployed as "plain text".

I'd love to contribute to your already great project, so please tell me if you are interested in me creating a PR with some/all of my changes.

Lucas

This service currently only supports authenticating using Personal Access Tokens. It either needs to be a token with the public_repo scope, which is far too broad. Or it can be a fine-grained token, but unfortunately those have mandatory expiry.

We should allow users to install this service as a GitHub app into their organization or personal account. This should allow us to specifically request permanent read-only access to the Workflow API.