mlco2 / mlco2/codecarbon

ci: use github app instead of token

Open
#1,394 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
1.9k
Forks
323
Avg merge
1d 12h
Merged PRs (30d)
12

Description

Would it be possible to use a github app instead of passing a github token ?
Not sure it applies here, but Sebastian Ramirez gave a great feedback about his use of it there : https://bsky.app/profile/tiangolo.com/post/3msy3sbkgxc23

Originally posted by @SaboniAmine in https://github.com/mlco2/codecarbon/pull/1393#discussion_r3794859611

Acceptance criteria

All github action flows doing {{secrets.GITHUB_TOKEN}} use the Github app as authentication instead.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Search the GitHub Actions workflow files for uses of ${{ secrets.GITHUB_TOKEN }} and inspect how each flow authenticates. Replace those authentication points with the GitHub App approach, then verify that every affected workflow runs successfully without the token.

Written by the indexing model from the issue text.

Assessment

Tech stack
github, github-actions
Domain
ci-cd
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
64/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.