Skip to content

feat(POP-1687): mint semver tokens from po-public-write App - #39

Merged
nestor-colt-cko merged 1 commit into
masterfrom
feat/POP-1687-github-app-token
Sep 3, 2026
Merged

nestor-colt-cko merged 1 commit into
masterfrom
feat/POP-1687-github-app-token

Conversation

@nestor-colt-cko

Copy link
Copy Markdown
Contributor

Replaces secrets.PO_GITHUB_TOKEN in semver with a po-public-write installation token, downscoped to this repository.

This repository is public, so it calls actions/create-github-app-token directly at the pinned SHA: the processout/actions composite lives in an internal repository and cannot be resolved from here, and the other Apps' org credentials are scoped to private and internal repositories.

Blocked until po-public-write is installed on this repository and the three PO_PUBLIC_WRITE_* org credentials include it.

POP-1687

@nestor-colt-cko
nestor-colt-cko merged commit 00b77df into master Sep 3, 2026
4 of 5 checks passed
@nestor-colt-cko
nestor-colt-cko deleted the feat/POP-1687-github-app-token branch September 3, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant