{
  "slug": "bk-adds-a-shared-memory-credential-store-for-headless-authentication-4338e0f3b4f0",
  "title": "bk adds a shared-memory credential store for headless authentication",
  "tools": [
    "bk"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-06-04T17:12:06.000Z",
  "announced_at": "2026-06-04T17:12:06.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "For headless authentication on Linux, use device authorization and select the shared-memory store with `bk auth login --device --credential-store shm`.",
    "examples": [
      "bk auth login --device --credential-store shm",
      "bk config set credential_store shm\nbk auth login --device"
    ],
    "gotchas": [
      "Version: v3.46.0",
      "--device: Use OAuth device authorization instead of opening a browser callback.",
      "--credential-store: Select the token credential store; documented values are `auto`, `keyring`, and `shm`.",
      "credential_store: `bk config set credential_store shm` sets the default credential store to shared memory.",
      "Prerequisite: Install the Buildkite CLI (`bk`)."
    ]
  },
  "why_it_matters": "Authenticate `bk` in a headless environment while storing credentials in shared memory.",
  "sources": [
    "https://github.com/buildkite/cli/releases/tag/v3.46.0",
    "https://buildkite.com/docs/platform/cli/reference/auth",
    "https://buildkite.com/docs/platform/cli/installation"
  ],
  "rank": 0.96024,
  "judge": {
    "publish": true,
    "judge_model": "codex-cli/gpt-6-luna+typesafe/jev-1.13.0",
    "prompt_version": "extract-v7+enrich-v2+judge-v2x3-rejudge+jev-publish-v1"
  },
  "review_state": "approved",
  "provenance": {
    "run_id": "wave2b-20261017",
    "verdict_id": "wave2b-20261017:wave2b-20261017-82c2ed3441c58946-0:rescue",
    "evidence_hash": "3ad4d259b3de41b66e5128e907dee1f83439a9e86c69be14273ee71efe59a167"
  },
  "review": {
    "draft_hash": "c16d952acc963fb8f394715908819691140fe3f0488a29ec4846e48db0d0c76f",
    "reviewer": "publication-gate",
    "reviewed_at": "2026-10-07T00:00:00.000Z",
    "decision": "wave2b-20261017:rescue",
    "reason": "Rescue path: first rejected only because the extracted card lacked usage; judged again on the enriched card, 3 of 3 judge runs approved with p_yes >= 0.9 (mean 0.96 >= 0.9; 2 needed) and Jev gave 0.68 (>= 0.6 needed)."
  }
}