VCSI: Supported Authentication Methods per Git Service in OIEP

The VCSI options defined in this topic can be used with the following Git services and protocols:

 

Protocols

Git Services

HTTPS (BA*)

SSH

HTTPS (PAT**)

GitHub

GitLab

Bitbucket

*BA = Basic Authentication

**PAT = Personal Access Token / App Password

GitHub Limitations and Configuration

The following limitations apply when using GitHub with STEP:

Unlike other Git services, GitHub is more restrictive in the level of security placed on accessing its repositories, specifically:

  • Basic authentication for HTTPS connections is not supported.

  • RSA SSH keys that use the sha-1 signature algorithm are not supported.

To summarize, the available authentication methods for using the Change Package Git Delivery method or Git Delivery Method with a GitHub account are with a Personal Access Token (PAT) or SSH with a private key accessible to the application server.

Bitbucket Limitations and Configuration

Bitbucket does not support using Basic authentication for HTTPS connections. This means that apart from SSH keys, the only other usable authentication method is app passwords.