Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to official GitHub action for managing app tokens #9340

Merged

Conversation

jeffwidman
Copy link
Member

@jeffwidman jeffwidman commented Mar 21, 2024

Improve security by switching to the official GitHub action for managing app tokens. More details.

The default scope is limited to only this repo per the docs:

If owner and repositories are empty, access will be scoped to only the current repository.

See also:

Improve security by switching to the official GitHub action for managing app tokens. More [details](tibdex/github-app-token#99 (comment)).

The default scope is limited to only this repo per the [docs](https://github.com/actions/create-github-app-token?tab=readme-ov-file#repositories):

> If owner and repositories are empty, access will be scoped to only the current repository.
@jeffwidman jeffwidman merged commit c7b16a1 into main Mar 21, 2024
53 checks passed
@jeffwidman jeffwidman deleted the switch-to-official-github-action-for-managing-tokens branch March 21, 2024 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants