github.com/chenbh/concourse/v6@v6.4.2/skymarshal/README.md (about)

     1  
     2  # skymarshal
     3  
     4  Concourse Skymarshal is responsible for issuing tokens that will be consumed by the `atc`. They should be statically verifiable and contain all required openid connect claims, as well as a `groups` claim for verifying concourse `team` membership. 
     5  
     6  This library is a thin wrapper around [coreos/dex](http://github.com/coreos/dex).
     7  
     8  ### Future considerations
     9  
    10  We want to investigate the ability to grant personal access tokens. This should just be a matter of exchanging the personal access token for a concourse token which contains all necessary claims.