单个项目或组的 Gitlab 访问 token ？

Question

有没有办法制作仅可用于一个项目的访问 token ？似乎只有个人访问 token ，可以访问我的所有项目。

Answer 1

是的!
见 GitLab 13.3 (2020 年 8 月)

Project access tokens

Project level access tokens allow access to a project without the need to provision a new GitLab user.

Project access tokens can be generated by project Maintainers or Owners and be used to authenticate with the GitLab API.
Project access tokens will be authorized as Maintainers.

This new functionality will make programmatic access to GitLab easier, more secure, and less cost prohibitive.

See Documentation and Issue.

另见 GitLab 13.5 (2020 年 10 月)

Project access tokens for GitLab.com

In GitLab 13.3, we introduced project-level access tokens for self-managed instances, allowing access to a project without the need to provision a new user.

We are now making project-level access tokens available in GitLab.com! Project access tokens can be generated by project Maintainers or Owners and be used to authenticate with the GitLab API and Git. Project access tokens will not increase the licensed seat count and are authorized as Maintainers. This new functionality will make programmatic access to GitLab easier, more secure, and less cost prohibitive.

See Documentation and Epic.

见 GitLab 14.1 (2021 年 7 月)

Select project access token role

Select project access token role

Users can now specify the level of access that a project token should have on the project level upon creation and can view existing project access token roles.

Prior to this release, project access tokens had the Maintainer role. For some users, this role included elevated permissions that were not required.

To avoid abuse, this feature is available for all users except for free GitLab SaaS accounts. All self-managed users as well as Premium and Gold SaaS customers can now easily select and view the appropriate role for their project access tokens.

See Documentation and Issue.