From 052033a755781a94bdcb0be03b8eab8cca616f3f Mon Sep 17 00:00:00 2001 From: Eden Zimbelman Date: Thu, 23 Apr 2026 12:23:11 -0700 Subject: [PATCH] ci: publish releases using the @slackapi github app token Co-Authored-By: Claude --- .github/workflows/release.yml | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ad9c612f0..906980490 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -51,10 +51,21 @@ jobs: contents: write id-token: write # OIDC: https://docs.npmjs.com/trusted-publishers steps: + - name: Gather credentials + id: credentials + uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + with: + client-id: ${{ secrets.GH_APP_CLIENT_ID }} + private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} + owner: ${{ github.repository_owner }} + repositories: ${{ github.event.repository.name }} + permission-contents: write + - name: Checkout repo uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: true + token: ${{ steps.credentials.outputs.token }} - name: Setup Node uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 @@ -86,4 +97,4 @@ jobs: createGithubReleases: true publish: npm run changeset -- publish env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ steps.credentials.outputs.token }}