Deprecate/remove least secure "Job token permissions" inbound control option

Problem to solve

🔗 See #468973's Problem to solve section

Proposal

🔪 Split from Convert CI/CD settings "Job token permissions" ... (#468973 - closed)

Deprecate/remove the All groups and projects option:

Authorized groups and projects:

  • 🔘 All groups and projects 👈
  • 🔘 This project only
  • 🔘 This project and any groups and projects in the allowlist

What these options do:

  • All groups and projects sets inboundJobTokenScopeEnabled: false
  • This project and any groups and projects in the allowlist sets inboundJobTokenScopeEnabled: true
  • This project only sets inboundJobTokenScopeEnabled: true and only allows access from within the project
Edited by Miranda Fluharty