Replace tibdex/github-app-token with actions/create-github-app-token (#357)

* Initial plan

* Initial repository exploration and plan for replacing tibdex/github-app-token

Co-authored-by: v1v <[email protected]>

* Replace tibdex/github-app-token with actions/create-github-app-token in all workflows

Co-authored-by: v1v <[email protected]>

* Apply suggestions from code review

* Update .github/workflows/pre-post-release.yml

* Remove unrelated license headers from Java test files

Co-authored-by: v1v <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: v1v <[email protected]>
Co-authored-by: Victor Martinez <[email protected]>

Author: Copilot

.github/workflows/addToProject.yml

@@ -15,15 +15,12 @@ jobs:
     steps:
     - name: Get token
       id: get_token
-      uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+      uses: actions/create-github-app-token@v2
       with:
-        app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-        private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-        permissions: >-
-          {
-            "organization_projects": "write",
-            "issues": "read"
-          }
+        app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+        private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+        permission-organization-projects: write
+        permission-issues: read
 
     - name: Assign issues with milestones to project
       uses: elastic/[email protected]

.github/workflows/labeler.yml

@@ -17,17 +17,14 @@ jobs:
 
     - name: Get token
       id: get_token
-      uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+      uses: actions/create-github-app-token@v2
       with:
-        app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-        private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-        permissions: >-
-          {
-            "members": "read",
-            "organization_projects": "write",
-            "issues": "read",
-            "pull_requests": "write"
-          }
+        app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+        private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+        permission-members: read
+        permission-organization-projects: write
+        permission-issues: read
+        permission-pull-requests: write
 
     - name: Add agent-java label
       run: gh issue edit "${NUMBER}" --add-label "agent-java" --repo "${{ github.repository }}"

.github/workflows/pre-post-release.yml

@@ -54,17 +54,14 @@ jobs:
     steps:
       - name: Get token
         id: get_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@v2
         with:
-          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-          permissions: >-
-            {
-              "contents": "write",
-              "pull_requests": "write"
-            }
-          repositories: >-
-            ["ecs-logging-java"]
+          app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permission-contents: write
+          permission-pull-requests: write
+          repositories: |
+            ecs-logging-java
 
       - uses: actions/checkout@v5
         with:

.github/workflows/updatecli.yml

@@ -19,15 +19,12 @@ jobs:
 
       - name: Get token
         id: get_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@v2
         with:
-          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-          permissions: >-
-            {
-              "contents": "write",
-              "pull_requests": "write"
-            }
+          app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permission-contents: write
+          permission-pull-requests: write
 
       - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with: