repos.gitCredentials.update

Update a stored HTTPS credential for a generic Git upstream.

Scope: repo:write on the repository.

PUT /api/repos/{repo_name}/git-credentials/{git_credential_id}

TypeScript

TypeScript

import { Pierre } from '@pierre/sdk';

// The client reads PIERRE_ORG and PIERRE_PRIVATE_KEY.
const pierre = new Pierre();

const gitCredential = await pierre.repos.gitCredentials.update({
  repo_name: 'my-demo-repository',
  git_credential_id: 'cred_01hs8z6j9m6v2m3v0x7g1h5n8q',
  password: 'glpat_rotated_token',
  username: 'oauth2',
});
console.log(gitCredential);

200

{
  "created_at": "2026-03-12T15:04:05Z",
  "id": "ggc_1234567890abcdef"
}

Authorizations

Authorization · string · header · required

JWT bearer token signed with your organization's registered signing key. There is no OAuth authorization server; you mint tokens yourself and the token's scopes claim carries the granted permission scopes. Public scopes: git:read (read repository contents), git:write (write branches, commits, tags, and notes), repo:write (create and manage repositories), org:read (list an organization's repositories). Each operation's security requirement names the scopes it requires. See https://code.storage/docs/getting-started/authentication for how to mint tokens.

Path Parameters

repo_name · string · required

The repository name, for example acme/web.

git_credential_id · string · required

Credential identifier.

Body

application/json

Rotate or replace an existing generic Git credential.

Request body for rotating an existing HTTPS Git credential when the credential is identified via the URL path.

password · string · required

Updated password or access token for the upstream provider.

Example:

"glpat_rotated_token"

username · string

Username for HTTPS authentication. Optional. With no username, requests to the upstream send the token as the password with the username x-token-auth for Bitbucket and oauth2 for GitLab, and as the username for Gitea, Forgejo, and Codeberg. sr.ht takes no credential over HTTPS: it serves private repositories and pushes only over SSH. An omitted username clears the stored one.

Example:

"oauth2"

Response

200

application/json

Credential updated successfully.

Stored Git credential summary returned after a credential is created or updated.

id · string · required

Credential ID returned when the credential is created.

Example:

"ggc_1234567890abcdef"

created_at · string

Credential creation timestamp in ISO 8601 format.

Example:

"2026-03-12T15:04:05Z"