CircleCI Ideas

Add the ability to request pipeline status information through the CCTray API to the per-project status-scoped API tokens

As a developer running a dashboard I'd like to be able to delegate a token to my dashboard that gives it minimal read-permissions to display status information about pipeline state on a per-project scope using the CCTray API so that I don't have to use my personal API token which has too broad access permissions to the CircleCI API and don't expose my pipeline runs and CircleCI data through potential privilege escalation.

Right now I can neither use my personal API token (because of the obvious security implications) or any other token that's available, since none of the per-project scope API tokens returns information using the CCTray API.

  • Avatar32.5fb70cce7410889e661286fd7f1897de Guest
  • Dec 8 2019
  • New
  • Attach files