git clone https://x-access-token:[email protected] failing intermittently

[meltsufin]

Select Topic Area

Bug

Body

We have the following logic to use an app credential to clone a private repo:

JWT=$(jwt encode --secret "@$GITHUB_APP_SECRET" --iss "$GITHUB_APP_ID" --exp "+10 min" --alg RS256)

GITHUB_TOKEN=$(curl -X POST \
    -H "Authorization: Bearer $JWT" \
    -H "Accept: application/vnd.github.v3+json" \
    https://api.github.com/app/installations/$GITHUB_APP_INSTALLATION_ID/access_tokens \
    | jq -r .token)

git clone https://x-access-token:[email protected]/[omitted]

However, recently this tarted failing about 90% of the time with the following:

remote: Invalid username or token. Password authentication is not supported for Git operations.
fatal: Authentication failed for 'https://github.com[omitted]

[meltsufin]

It looks like the issue is asking for 10 min expiration, which is too close to the 10 min maximum.