rajbos / rajbos/github-actions-requests
Convert usage of Personal Access Token to use a GitHub App
Open
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 13
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
Currently we use a PAT for everything, can we convert this to use a GitHub App? That way it is not tied to a user, which is better to use in an enterprise setting.
Setup would be:
- Create an App
- Use the ClientId and ClientSecret in the secrets
- Get a token during execution through gh-token
Things to check:
- Can this work across orgs? We make the fork and the checks in another org. Maybe use the App from that org?
- Do we then still need an App in this org (
rajbos/ or this repogithub-actions-requests)?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the existing GitHub Actions configuration and where its PAT secrets are consumed. Verify whether a GitHub App token from gh-token can authenticate the fork and checks across the involved organizations, then confirm that the workflow no longer depends on a user-bound PAT and document the required app secrets.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- authentication, ci-cd
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100