Skip to content

Fix versioning workflow: use GitHub App token instead of expired PAT#293

Merged
vahid-ahmadi merged 1 commit intomainfrom
fix/versioning-use-github-app-token
Mar 16, 2026
Merged

Fix versioning workflow: use GitHub App token instead of expired PAT#293
vahid-ahmadi merged 1 commit intomainfrom
fix/versioning-use-github-app-token

Conversation

@vahid-ahmadi
Copy link
Collaborator

Summary

  • The POLICYENGINE_GITHUB personal access token expired, causing the versioning workflow to fail on every merge to main (example run)
  • Replaces the PAT with a short-lived token generated via actions/create-github-app-token@v1 using the org's existing APP_ID and APP_PRIVATE_KEY secrets
  • More secure: no dependency on any individual's personal account, tokens are short-lived and scoped

Test plan

  • Merge this PR and verify the versioning workflow succeeds on the resulting push to main
  • Check that the changelog and version bump commit is created correctly

🤖 Generated with Claude Code

The POLICYENGINE_GITHUB personal access token expired, breaking the
versioning workflow. This replaces it with a short-lived token
generated from the org's GitHub App (APP_ID + APP_PRIVATE_KEY),
which is more secure and doesn't depend on any individual's account.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@vahid-ahmadi vahid-ahmadi merged commit f03f76a into main Mar 16, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant