Discussion:
Some users do not want to use the built-in Github OAUTH connector to access their Github repos and organizations and would prefer to use a fixed account or token. This also allows you to configure which user is importing repos and creating Fix Pull Requests on your Snyk Projects.
Resolution:
To configure your Github connection with a token-based authentication you'd simply have to either:
- Deploy a snyk broker - this is not the most elegant solution as it requires you to be running a container at all times that brokers the connection between Snyk and Github. The broker is primarily designed to connect private instances of SCM tools that are behind a firewall where the broker container has access and it can relay communications via HTTPS to Snyk.
- Configure your Github integration as a Github Enterprise integration. The GHE uses a token-based connection rather than the OAUTH method that you've got some contention with here. You'd simply type
api.github.com
as the URL for your "Github Enterprise" server and add a token with the appropriate fullrepo
,read:org
andadmin:repo_hook
scopes.