[JIRA] (JENKINS-59016) GitHub branch source 2.5.5 & newer ignore domain limited credentials when scanning

[jn...@cloudbees.com (JIRA)]

Title: Message Title

James Nord commented on JENKINS-59016   Re: GitHub branch source 2.5.5 & newer ignore domain limited credentials when scanning this causes lots of confusion when the credential works for an organisation folder (scanning all of github) and then the scan of the actual repo does not and falls back to anonymous. eg. [Thu Mar 19 11:12:10 UTC 2020] Updating actions... Looking up details of myghorg... Organization URL: CloudBees [Thu Mar 19 11:12:10 UTC 2020] Consulting GitHub Organization 11:12:10 Connecting to https://api.github.com using my-credential/****** (PAT token for GitHub) 11:12:10 Looking up repositories of organization myghorg Ignoring wibble Ignoring bar Ignoring foo ... ignoring silly-name Proposing some-repo 11:13:21 GitHub API Usage: Current quota has 59 remaining (5 under budget). Next quota of 60 in 1 hr 0 min 11:13:22 Connecting to https://api.github.com with no credentials, anonymous access ERROR: [Thu Mar 19 11:13:22 UTC 2020] Could not fetch sources from navigator org.jenkinsci.plugins.github_branch_source.GitHubSCMNavigator@7cf2c1ef I beleive the scanning is done by the same plugin - which is why this is just confusing. > Credential domains usually only control user interface visibility of the credential, not job internal visibility of the credential that should never be the case, where it is it is a security issue in the plugins that do that - please file them if you know of this. Add Comment   This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.201369.1566328715000.18857.1588076940233%40Atlassian.JIRA.