Download Blog Introduction Quickstart

CI/CD GitHub Actions GitLab CI Any other CI API keys for CI

CI/CD

API keys for CI

Least privilege for the credential your pipeline holds.

View as Markdown

Stub

This page is not written yet. The outline below is what it will cover.

The permission sets for each pattern: trigger-only, trigger-and-read, upload-and-confirm.
Why a CI key should never carry artifacts:delete.
Rotation, and auditing what the key did.

Any other CI

If it can run a binary and hold a secret, it can back up.

Integrations

saved.sh talking to the rest of your tooling.