[Naor-Armo]

Summary

Remove ARMOSEC_GITHUB_ACCESS_TOKEN from both workflows. utils-go is public and has no armosec/kubescape module dependencies, so the PAT checkout token and the git insteadOf rewrites were unused, and a public repo should not hold an org-wide PAT.

Source of Truth

N/A — CI credential hardening (narrowing org secrets exposed to public repos), no ticket.

Changes

• .github/workflows/pr.yaml, .github/workflows/release.yaml: drop the GH_ACCESS_TOKEN env, the checkout token:, and the two insteadOf rewrites. Checkout falls back to the default GITHUB_TOKEN.

Testing

• go.mod has no github.com/armosec/* or github.com/kubescape/* requirements.
• Locally, with no git credentials and the public proxy only: GOPROXY=https://proxy.golang.org GIT_TERMINAL_PROMPT=0 go mod download and go build ./... both succeed.
• This PR's own PR Checks run exercises the updated workflow.

Docs

Docs-exempt: CI credential removal, no behavior change.

AI Context

Category	Used
Skills	None
MCP Servers	None
Rules/Commands	open_pr

🤖 Generated with Claude Code

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}