We have a build system, which fetches the sources and executes build commands. At present a dedicated person (build master) does the fetching with her personal account in the source control system.
We'd like to automate the build process. How can access to the source control system be secured?
I see an option to create a "shared account" (let's call it
buildmaster) so that the user who is authorised to do the build would use a script with
buildmaster's credentials (in our case - username/password) to fetch the sources. How could then
buildmaster's password be made available to only those users who are authorised to run (production) builds?