Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to the official action for managing app tokens #504

Merged

Conversation

jeffwidman
Copy link
Member

@jeffwidman jeffwidman commented Mar 21, 2024

Improve security by switching to the official GitHub action for managing app tokens. More details.

The repositories key is safe to remove because per the docs:

If owner and repositories are empty, access will be scoped to only the current repository.

See also:

Improve security by switching to the official GitHub action
for managing app tokens. More [details](tibdex/github-app-token#99 (comment)).

The `repositories` key is safe to remove because per
the [docs](https://github.com/actions/create-github-app-token?tab=readme-ov-file#repositories):

> If owner and repositories are empty, access will be scoped to only the current repository.
Copy link

@gr2m gr2m left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me 👍🏼 thanks for migrating!

@jeffwidman jeffwidman merged commit e21c9fb into main Mar 21, 2024
6 checks passed
@jeffwidman jeffwidman deleted the switch-to-the-official-github-action-for-managing-tokens branch March 21, 2024 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants