Hi,
I want to use the new forge build command in my CI chain.
I have a gitOps driven approach with two repositories:
(1) code repository, builds shippable on git tag => accessible by developers
(2) deploy repository, deploys shippables via CI and deploy descriptors => accessible only by release managers
Problem:
I want to create a forge token with least possible scopes to perform the “forge build” command.
Because the code repository should not be able to deploy an actual shippable, only prepare “build” it.
How can I do so? I tried these scopes and once I run the command I get an error like so:
Building and uploading your app...
ℹ Packaging app files
ℹ Uploading app
Error: You need a token with the right authorisation scopes to access this field. To create a new token with the required scopes, visit: https://go.atlassian.com/forge-cli-api-token
The scope settings I tried:
What do these scopes do?
- deploy:app-environment => Seems like it is needed only to perform an actual deploy
- manage:app-installation => ?
Please tell me which scopes I need to use so that the code repository CI cannot deploy actually apps, thanks.