Closed v1v closed 1 month ago
Use https://github.com/tibdex/github-app-token to generate ephemeral tokens with the required permissions only
This is the alternative to moving away from finer-grained GitHub tokens and reducing the cumbersome of rotating them as we do nowadays.
We have used the same GitHub action in other places.
What
Use https://github.com/tibdex/github-app-token to generate ephemeral tokens with the required permissions only
This is the alternative to moving away from finer-grained GitHub tokens and reducing the cumbersome of rotating them as we do nowadays.
Implementation details
We have used the same GitHub action in other places.