Convert usage of Personal Access Token to use a GitHub App - Githubissues

rajbos / github-actions-requests

This repository is meant to hold the setup for requesting actions to be used internally

MIT License

13 stars 15 forks source link

Convert usage of Personal Access Token to use a GitHub App #8

Open rajbos opened 3 years ago

rajbos commented 3 years ago

Currently we use a PAT for everything, can we convert this to use a GitHub App? That way it is not tied to a user, which is better to use in an enterprise setting.

Setup would be:

Create an App
Use the ClientId and ClientSecret in the secrets
Get a token during execution through gh-token

Things to check:

Can this work across orgs? We make the fork and the checks in another org. Maybe use the App from that org?
Do we then still need an App in this org (rajbos / or this repo github-actions-requests)?