search

Roblox / cla-signature-bot

GitHub Action for self-contained handling of CLA signatures
Apache License 2.0
17 stars 8 forks source link

Add GitHub App auth support #3

Open cliffchapmanrbx opened 4 years ago

cliffchapmanrbx commented 4 years ago

Currently the app needs a PAT (tied to a specific account) to perform auth for the remote repository. Modify this to allow for GitHub App auth instead, allowing the action to authenticate as an app. The app should only need repo read/write scopes to be able to read and write to the cla.json file in the remote repo, nothing more.

cliffchapmanrbx commented 4 years ago

This looks easier than I thought: https://www.npmjs.com/package/@octokit/app