Skip to content

GitLab Next

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • GitLab GitLab
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 39,511
    • Issues 39,511
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
  • Merge requests 1,223
    • Merge requests 1,223
  • Requirements
    • Requirements
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
    • Value stream
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.org
  • GitLabGitLab
  • Issues
  • #9147

You need to sign in or sign up before continuing.
Closed
Open
Created Jan 10, 2019 by Lee Matos@lbot🗽Maintainer

If you have more than 10 GitHub OAuth Tokens, the oldest will be revoked.

We ran into this in a long running customer ticket: https://gitlab.zendesk.com/agent/tickets/111075

It took a while to deduce, but we figured out that Github has a limit to the amount of tokens it will give you. Currently it's 10.

To repro:

  1. Create 11 repos on Github.
  2. Set up the github integration and import one repo at a time as outlined here: https://docs.gitlab.com/ee/ci/ci_cd_for_external_repos/github_integration.html#connect-with-github-integration
  3. On the 11th repo import, the first imported repo will now start failing due to the token being revoked.

you can go to the mirroring tab and grab the URL and try it in your terminal to confirm outside of GitLab.

I'm not sure there is much we can do, but this can have far reaching effects for users of this integration. The customer suggested maybe a mechanism to track and reuse tokens, but I'm concerned about the security implications there.

Assignee
Assign to
Time tracking