GitHub SCM: Add app installation access token endpoint (#81)

--------- Signed-off-by: Alexis Grant <[email protected]>
semgrep · Aug 9, 2024 · b1160b8 · b1160b8
1 parent db4525e
commit b1160b8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -99,6 +99,7 @@ Under the hood, this config adds these allowlist items:
 - GET `https://github.example.com/api/v3/users/:user/installation`
 - GET `https://github.example.com/api/v3/users/:user/installation/repositories`
 - GET `https://github.example.com/api/v3/app`
+- POST `https://github.example.com/api/v3/app/installations/:id/access_tokens
 - POST `https://github.example.com/api/v3/app-manifests/:code/conversions`
 - POST `https://github.example.com/api/v3/repos/:owner/:repo/pulls/:number/comments`
 - POST `https://github.example.com/api/v3/repos/:owner/:repo/issues/:number/comments`

diff --git a/pkg/config.go b/pkg/config.go
@@ -393,6 +393,11 @@ func LoadConfig(configFiles []string, deploymentId int) (*Config, error) {
 				URL:               gitHubBaseUrl.JoinPath("/app").String(),
 				Methods:           ParseHttpMethods([]string{"GET"}),
 				SetRequestHeaders: headers,
+			},
+			AllowlistItem{
+				URL:               gitHubBaseUrl.JoinPath("/app/installations/:id/access_tokens").String(),
+				Methods:           ParseHttpMethods([]string{"POST"}),
+				SetRequestHeaders: headers,
 			})
 
 		if config.Inbound.GitHub.AllowCodeAccess {