platform-identity-github

Type: regulative

Decision

Platform and landing zone workflows must authenticate to GitHub through the platform GitHub identity.

Why

Without a shared GitHub App, the platform has no mechanism to provision and configure application repos and environments.

Violations

• GITHUB_TOKEN used to write org-level variables or trigger other workflows.

Anchor

no-human-touch

Implements

• platform-github-identity

Files

• githubVariables.json
• .github/workflows/template-landing-zones.yml

← Back to knowledge graph