search

elastic / ecs-logging-php

Apache License 2.0
19 stars 35 forks source link

github-action: use ephemeral tokens with the required permissions #68

Closed v1v closed 2 months ago

v1v commented 2 months ago

Details

⚠️ This PR was created by an automated tool. Please review the changes carefully. ⚠️

What

Use https://github.com/tibdex/github-app-token to generate ephemeral tokens with the required permissions only

This is the alternative to moving away from finer-grained GitHub tokens and reducing the cumbersome of rotating them as we do nowadays.

Implementaiton details

We have used the same GitHub action in other places.

If there are any questions, please reach out to the @elastic/observablt-ci

v1v commented 2 months ago

CLA checker will cause some disruptions - I'm working on it with the relevant CLA owners. for now, I'll keep this draft to avoid surprises.