github-action: use ephemeral tokens with the required permissions - Githubissues

elastic / ecs-dotnet

https://www.elastic.co/guide/en/ecs-logging/dotnet/current/setup.html

Apache License 2.0

120 stars 62 forks source link

github-action: use ephemeral tokens with the required permissions #431

Closed v1v closed 2 months ago

v1v commented 2 months ago

Details

⚠️ This PR was created by an automated tool. Please review the changes carefully. ⚠️

What

Use https://github.com/tibdex/github-app-token to generate ephemeral tokens with the required permissions only

This is the alternative to moving away from finer-grained GitHub tokens and reducing the cumbersome of rotating them as we do nowadays.

Implementaiton details

We have used the same GitHub action in other places.

If there are any questions, please reach out to the @elastic/observablt-ci

v1v commented 2 months ago

The CLA checker will cause some disruptions - I'm working on it with the relevant CLA owners. For now, I'll keep this draft to avoid surprises.