Skip to content

ci: push release commits and tags with a GitHub App token - #8

Closed
samc621 wants to merge 1 commit into
mainfrom
ci/release-app-token
Closed

samc621 wants to merge 1 commit into
mainfrom
ci/release-app-token

Conversation

@samc621

@samc621 samc621 commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

The workflow token drops to read-only; semantic-release and the checkout use a token minted from the release GitHub App.

The workflow token drops to read-only. semantic-release and the checkout use a token minted from the release GitHub App (RELEASE_APP_ID, RELEASE_APP_PRIVATE_KEY), so the App can be the only actor allowed to push to a protected main and to create v* tags.

Co-Authored-By: Claude <noreply@anthropic.com>
@samc621

samc621 commented Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Superseded: commit body re-wrapped for commitlint.

@samc621 samc621 closed this Oct 6, 2026
@samc621
samc621 deleted the ci/release-app-token branch October 6, 2026 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants