Skip to content

README.md

Latest commit

 

History

History
26 lines (21 loc) · 1.83 KB

README.md

File metadata and controls

26 lines (21 loc) · 1.83 KB

Pip example project

Project to showcase installing of python dependencies using github Actions from private git reporistories. Python library to install: aws-pylib (fork)

git ssh with key-pair

  1. Create a keypair somewhere using ssh-keygen -t rsa -b 4096 without passphrase. Don't overwrite your current one ;)
  2. Add a new Deploy key ACTIONS_PIP_ACCESS_EXAMPLE_PROJECT_PUB to aws-pylib with the content of file id_rsa.pub
  3. Add a new secret to this dependent project pip-example-project ACTIONS_PIP_ACCESS_EXAMPLE_PROJECT_PRIV = content of id_rsa
  4. Commit a change and see how the github actions install-dep-ssh is running
  • Generate new keypair for each dependent application.
  • If multiple libraries are required, add content of id_rsa.pub as a new deploy key to required repo.
    • For this save the id_rsa.pub inside the dependent project id_rsa.pub, so you can easily get the public key to add new deploy keys.

git https with PAT (Personal access token)

  1. Generate Personal access tokens with scope repo ACTIONS_PIP_ACCESS_EXAMPLE_PROJECT_TOKEN
    • If you don't want to create the token on a real user, create a machine user git account and generate a token for each dependent repository.
    • The machine user should only have read-access to the repositories.
  2. Add a new secret to this dependent project pip-example-project with same name: ACTIONS_PIP_ACCESS_EXAMPLE_PROJECT_TOKEN = generated token
  3. Commit a change and see how the github actions install-dep-https is running
  • As it is a PAT, dependent project has access to ALL private repositories.