Allow CI_JOB_TOKEN to push to allowlisted repositories
Proposal
In !154111 (merged), we added the ability for CI_JOB_TOKEN to make git pushes to its own repository. The feature flag push_repository_for_job_token_allowed was introduced in v17.2
In the associated issue for this functionality, #389060 (closed), there are multiple conversations about a future iteration where the CI_JOB_TOKEN can be used to push git changes to other repositories, if the originating repository is on the target repository's job token allowlist.
Issue threads about this:
Several customers have expressed interest in this capability:
Edited by 🤖 GitLab Bot 🤖