Merge pull request #747 from jenkinsci/revert-744-app-org-different-f…

…rom-repo-org Revert "Do not enforce GitHub app to comes from the same org as the repo org. The GH app can come from another org as log as it is installed in the org with the target git repo there is no security issue"
jenkinsci · Nov 15, 2023 · 6bfb8df · 6bfb8df
2 parents 6b61a1d + 901162c
commit 6bfb8df
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/main/java/org/jenkinsci/plugins/github_branch_source/GitHubAppCredentials.java b/src/main/java/org/jenkinsci/plugins/github_branch_source/GitHubAppCredentials.java
@@ -326,6 +326,9 @@ public String getUsername() {
     @NonNull
     public synchronized GitHubAppCredentials withOwner(@NonNull String owner) {
         if (this.owner != null) {
+            if (!owner.equals(this.owner)) {
+                throw new IllegalArgumentException("Owner mismatch: " + this.owner + " vs. " + owner);
+            }
             return this;
         }
         if (byOwner == null) {