nautobot / cookiecutter-nautobot-app

Cookiecutter template for creating new Nautobot Apps.
https://docs.nautobot.com/projects/cookiecutter-nautobot-app/en/latest/
Apache License 2.0
16 stars 5 forks source link

`repo_token` is not needed, GH provides a token #162

Open abates opened 2 months ago

abates commented 2 months ago

In the publish_gh job the svenstaro/upload-release-action@v2 action does not require a repo_token and will default to github.token (see the action README). The github.token is autogenerated during workflow runs (see the documentation) and will work just fine for publishing to releases.

I have updated this in the AWX Runner repo and it worked fine.

gsnider2195 commented 3 weeks ago

This will work as long as nobody has changed the default github token permissions in the repo or org.

https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#permissions-for-the-github_token