Allow actions/create-github-app-token for generating the necessary token from a GitHub App (#791)

trask · web-flow · commit addf52fbb222 · 2025-07-08T21:43:20.000Z
Signed-off-by: Trask Stalnaker &lt;trask.stalnaker@gmail.com&gt;
diff --git a/app/server/verify_workflow.go b/app/server/verify_workflow.go
@@ -165,6 +165,7 @@ func verifyScorecardWorkflow(workflowContent string, verifier commitVerifier) er
 		switch stepName {
 		case
 			"actions/checkout",
+			"actions/create-github-app-token",
 			"ossf/scorecard-action",
 			"actions/upload-artifact",
 			"github/codeql-action/upload-sarif",
