This PR does a few things to make setting up CFA dramatically easier.
Upon configuring CircleCI requesters we now automatically set the CFA_PROJECT_ID and CFA_SECRET environment variables
Resetting the project secret automatically updates the CFA_SECRET environment variable
Exposes an endpoint that allows valid CircleCI OIDC tokens to request a GitHub App Installation token for just that project to use as a semantic release GITHUB_TOKEN
This means (at least for the electron org) the process of setting up CFA has been simplified to:
Construct a valid CircleCI config (now including a reference to @continuous-auth/circleci-oidc-github-auth)
Use the cfa-release context on the release job in your CircleCI config
Set up the project on CFA
There will be a separate repository / doc outlining how to create new npm packages for CFA to publish.
This PR does a few things to make setting up CFA dramatically easier.
CFA_PROJECT_ID
andCFA_SECRET
environment variablesCFA_SECRET
environment variableThis means (at least for the electron org) the process of setting up CFA has been simplified to:
@continuous-auth/circleci-oidc-github-auth
)cfa-release
context on the release job in your CircleCI configThere will be a separate repository / doc outlining how to create new npm packages for CFA to publish.