Skip to content

ci: migrate GH_TOKEN_ADMIN to GitHub App token authentication#953

Merged
mbruzda-splunk merged 2 commits intomainfrom
ci/migrate-gh-token-to-app
Apr 21, 2026
Merged

ci: migrate GH_TOKEN_ADMIN to GitHub App token authentication#953
mbruzda-splunk merged 2 commits intomainfrom
ci/migrate-gh-token-to-app

Conversation

@mbruzda-splunk
Copy link
Copy Markdown
Contributor

Summary

  • Replace long-lived GH_TOKEN_ADMIN PAT with short-lived tokens generated by actions/create-github-app-token@v3 across all five jobs in build-test-release.yml
  • Each job gets its own token generation step (tokens are per-job, revoked when the job ends)
  • Git config URL rewriting updated to use x-access-token: prefix for GitHub App installation tokens

Made with Cursor

Replace the long-lived GH_TOKEN_ADMIN PAT with short-lived tokens
generated by actions/create-github-app-token@v3 in all five jobs
(test-splunk-unit, test-splunk-external, test-splunk-matrix,
test-cim-models-versions, publish).

Made-with: Cursor
@mbruzda-splunk mbruzda-splunk requested a review from a team as a code owner April 17, 2026 13:28
dkaras-splunk
dkaras-splunk previously approved these changes Apr 21, 2026
Two fixes for test-splunk-external:
1. entrypoint.sh: GitHub App tokens require x-access-token:<token> format
   in HTTPS URLs; using the token bare as a username fails authentication.
2. Dockerfile.tests: pyenv compiles Python 3.7.8 from source but libssl-dev
   and other build deps were missing, causing SSL extension build failure.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@mbruzda-splunk mbruzda-splunk merged commit 14e8736 into main Apr 21, 2026
25 of 26 checks passed
@mbruzda-splunk mbruzda-splunk deleted the ci/migrate-gh-token-to-app branch April 21, 2026 13:37
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 21, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants