Appearance
github.git.repository-credential-lease ​
Issue one repository-scoped read credential to a fenced trusted runner.
Mint a one-time read credential for one repository owned by an active runner workspace or environment build lease.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Atomic |
| Library | App-github |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
organization_uuid | uuid | Yes | — | — |
repository_uuid | uuid | Yes | — | — |
runner_execution_uuid | uuid | No | — | — |
runner_instance_uuid | uuid | No | — | — |
workspace_lease_uuid | uuid | No | — | — |
environment_build_uuid | uuid | No | — | — |
environment_build_lease_uuid | uuid | No | — | — |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
repository_uuid | uuid | Yes | — | — |
runner_execution_uuid | uuid | No | — | — |
runner_instance_uuid | uuid | No | — | — |
workspace_lease_uuid | uuid | No | — | — |
environment_build_uuid | uuid | No | — | — |
environment_build_lease_uuid | uuid | No | — | — |
binding_uuid | uuid | Yes | — | — |
broker_binding_key | string | Yes | — | — |
provider | string | Yes | — | — |
repository | string | Yes | — | — |
username | string | Yes | — | — |
token | string | Yes | — | — |
expires_at | string | Yes | — | — |
scope | list | Yes | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_step | string | No | — | — |
failed_layer | string | No | — | — |
failed_at_state | string | No | — | — |
error | string | No | — | — |
error_type | string | No | — | — |
failed_at | string | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
pending | Yes | No | — | execute | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
pending | execute | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "github.git.repository-credential-lease",
"initial_data": {
"organization_uuid": "value",
"repository_uuid": "value"
}
}