Connect Buildkite to GitHub with secure, short-lived tokens.
Chinmina Bridge allows Buildkite agents to securely generate GitHub API tokens that can be used to perform Git or other GitHub API actions. It is intended to be an alternative to the use of SSH deploy keys or long-lived Personal Access Tokens.
The bridge itself is an HTTP endpoint that uses a GitHub application to create ephemeral GitHub access tokens. Requests are authorized with a Buildkite OIDC token, allowing a token to be created just for the repository associated with an executing pipeline.
Note
Further details about Chinmina Bridge are available in the documentation.
This has an expanded introduction, a getting started guide and a detailed configuration reference.
The documentation has a more detailed description of the implementation, and clear guidance on configuration and installation.
This project welcomes contributions! For detailed guidance on contributing, including standards for pull requests, code quality, and AI-generated contributions, see the contributing guide.
Quick start:
- Browse outstanding issues for something to work on
- Follow the local development setup to get started
- Review the contributing guidelines before submitting your PR