class

CRE::Rotators::GithubPatRotator

Inherits CRE::Rotators::Rotator < Reference < Object

GithubPatRotator manages fine-grained Personal Access Tokens. It uses an admin/issuer bearer to create the new PAT and to delete the old one.

Required Credential.tags: "name" - PAT label "old_pat_id" - the GitHub PAT id to revoke on commit "scopes" - JSON-encoded array of scope strings (e.g. ["repo","read:org"]) Optional "expires_in_days" - default 90

Constructors

new(client : Github::Client)

Source

Instance methods

apply(c : Domain::Credential, s : Domain::NewSecret) : Nil

Source

can_rotate?(c : Domain::Credential) : Bool

Source

commit(c : Domain::Credential, s : Domain::NewSecret) : Nil

Source

generate(c : Domain::Credential) : Domain::NewSecret

Source

kind

Source

rollback_apply(c : Domain::Credential, s : Domain::NewSecret) : Nil

Default no-op; rotators override when apply() creates reversible side effects.

Source

verify(c : Domain::Credential, s : Domain::NewSecret) : Bool

Source