-
Notifications
You must be signed in to change notification settings - Fork 51
CERT-9316 | Stop using PAT #208
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This PR transitions from using Personal Access Tokens (PAT) to a more secure repository access method by integrating the certora/secure-repo-access orb in CircleCI configuration.
Changes:
- Added the
secure-repo-accessorb to replace PAT-based authentication - Updated the ReportAnalysis package installation to use a specific branch
- Modified multiple workflow contexts to include
secure_repo_accessalongsideaws_staging
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
.circleci/config.yml
Outdated
| name: Install ReportAnalysis package and execute ReportAnalyzer | ||
| command: | | ||
| pip3.11 install git+ssh://git@github.com-reportanalysis/Certora/ReportAnalysis.git | ||
| pip3.11 install git+ssh://git@github.com-reportanalysis/Certora/ReportAnalysis.git@oz/pat |
Copilot
AI
Feb 4, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The branch name 'oz/pat' suggests this is related to PAT (Personal Access Token), which contradicts the PR's purpose of removing PAT usage. Consider renaming this branch to better reflect its purpose with the new secure access method.
| pip3.11 install git+ssh://git@github.com-reportanalysis/Certora/ReportAnalysis.git@oz/pat | |
| pip3.11 install git+ssh://git@github.com-reportanalysis/Certora/ReportAnalysis.git@oz/secure-access |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Stop using github PAT used by
ReportAnalyzer.secure-repo-accessorb to generate temporary github tokens.secure_repo_accesscontext (github app private key) toexamples-regtestjobs.