AWS Codebuild createProject method is missing oauth token parameter for Github auth?

Question

AWS Codebuild createProject method is missing OAuth token parameter for Github auth?

I would like to avoid using CodePipeline. I would like to programmatically create a code build project with Github token but I can't seem to find a way to include a GitHub token. As anyone experienced this?

var params = {
    artifacts: {
      /* required */
      type: 'S3',
      location: 'STRING_VALUE',
      packaging: 'ZIP'
    },
    environment: {
      /* required */
      computeType: 'BUILD_GENERAL1_LARGE',
      image: 'aws/codebuild/nodejs:4.3.2', /* required */
      type: "LINUX_CONTAINER",
    },
    name: key, /* required */
    source: {
      /* required */
      type: "GITHUB",
      auth: {
        type: "OAUTH"
      },
      buildspec: 'echo "test";',
      location: `https://github.com/${original.organizations.name}/${original.repos.name}.git`,

    },
    description: 'STRING_VALUE',
    serviceRole: 'arn:aws:iam::171566796811:role/tmmmm6',
    timeoutInMinutes: 5
  };
  codebuild.createProject(params, function (err, data) {
    if (err) console.log(err, err.stack); // an error occurred
    else     console.log(data);           // successful response


    console.log("WEBHOOK")
    var params = {
      projectName: key /* required */
    };
    codebuild.createWebhook(params, function(err, data) {
      if (err) console.log(err, err.stack); // an error occurred
      else     console.log(data);           // successful response
    });


  });

I tried with the following URL format : https://${original.github.token}:@github.com/${original.organizations.name}/${original.repos.name}.git but that does not work. Codebuild would not allow me to create a webhook.

Here is the documentation. http://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/CodeBuild.html Is it possible to create a code build with GitHub access token? I know how to do it with code pipeline but I would like to avoid using code pipeline if possible.

Zhen Li · Accepted Answer · 2017-10-30 21:03:11Z

5

There is no programmatic way to do this. You can use AWS CodeBuild console to connect your GitHub account. This is one time setup. Once connected, all future CodeBuild projects using source from your GitHub account will be able to use the stored token.

answered Oct 30, 2017 at 21:03

Zhen Li

1714 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Tim Jones Over a year ago

This is no longer true. See below.

Griffin Miller · Accepted Answer · 2019-03-15 18:15:34Z

1

You are missing a parameter in your template. The source should look like this:

    source: {
      /* required */
      type: "GITHUB",
      auth: {
        type: "OAUTH",
        resource: "GITHUB"
      },
      buildspec: 'echo "test";',
      location: `https://github.com/${original.organizations.name}/${original.repos.name}.git`,

    },

As Zhen Li stated, you must first authorize your AWS account with Github through the console (create auth resource like this) once and then you can programmatically create as many authorized build projects for your Github as you want!

answered Mar 15, 2019 at 18:15

Griffin Miller

361 silver badge5 bronze badges

Comments

Tim Jones · Accepted Answer · 2021-04-17 05:51:41Z

1

This is no longer the case. See: How do you specify GitHub access token with CodeBuild from CloudFormation

In essence:

Create a PAT and put it in secrets manager
Create an AWS::CodeBuild::SourceCredential in CloudFormation and dynamically link the secret.
Reference this resource in the project defn.

Details above. Token should have repo and admin:repo_hook (if you want to use webhooks) permissions.

answered Apr 17, 2021 at 5:51

Tim Jones

1,00510 silver badges14 bronze badges

Comments

Mike · Accepted Answer · 2019-09-04 16:43:33Z

0

I just found this thread... So follow up question: If you have to do this one-time setup for GH, then if I have multiple teams - each with their own GH org, I can't use separate tokens then?

I have to use a token from a user that has rights to all GH orgs? Is that correct?

answered Sep 4, 2019 at 16:43

Mike

8532 gold badges13 silver badges28 bronze badges

Collectives™ on Stack Overflow

AWS Codebuild createProject method is missing oauth token parameter for Github auth?

4 Answers 4

1 Comment

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

1 Comment

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related