Deploy Token - CI/CD用語集の定義

著者 Kaveh Alemi·Latchkey

デプロイトークンとは、単一の機能（レジストリへのプッシュやパッケージフィードの読み取りなど）にスコープが限定された専用の資格情報で、個人アカウントの代わりに pipeline が使用するため、アクセスが監査可能かつ取り消し可能になります。

Where this shows up in a real pipeline

A definition is only useful if you can recognise the thing in your own logs. In practice this concept surfaces when a job behaves differently between a local run and a runner, which is where most CI debugging starts.

• Compare a local run against a CI run of the same command before assuming a tool is at fault.
• Runner environments differ in shell, PATH, TTY availability, available memory, and disk. Most CI-only behaviour traces to one of those five.
• Pin tool versions so an environment difference cannot be introduced by an unrelated update.

よくある質問