bradleyfalzon/ghinstallation

on GitHub

22 releases

new releases every 3 months 3 weeks

last release was 03/21/2024

last checked today at 5:48 PM

291

HTTP Round Tripper for GitHub Apps - Authenticate as an Installation Workflow

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2022-39304	December 20, 2022	4.7 MEDIUM	N/A
ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinstallation version 1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. The request contained the bearer JWT for the App, and was returned back to clients. This token is short lived (10 minute maximum). This issue has been patched and is available in version 2.0.0.