Skip to content

Conversation

@kevinbackhouse
Copy link
Collaborator

Codespace secrets are not allowed to have a name that starts with "GITHUB".

I ran this command to replace the name everywhere:

find . -type f -exec sed -i 's/GITHUB_PERSONAL_ACCESS_TOKEN/GH_TOKEN/g' {} \

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR renames the GITHUB_PERSONAL_ACCESS_TOKEN environment variable to GH_TOKEN to comply with Codespaces secret naming restrictions, which prohibit secrets starting with "GITHUB".

  • Replaced all occurrences of GITHUB_PERSONAL_ACCESS_TOKEN with GH_TOKEN throughout the codebase
  • Updated documentation, scripts, and devcontainer configuration files

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
docker/run.sh Updated Docker run script to pass GH_TOKEN environment variable instead of GITHUB_PERSONAL_ACCESS_TOKEN
README.md Updated example .env configuration to show GH_TOKEN instead of GITHUB_PERSONAL_ACCESS_TOKEN
.devcontainer/post-attach.sh Updated Codespaces validation script to check for GH_TOKEN and display the correct secret name in warning messages

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@kevinbackhouse kevinbackhouse marked this pull request as ready for review December 8, 2025 16:42
@kevinbackhouse kevinbackhouse merged commit 81bf2ed into GitHubSecurityLab:main Dec 8, 2025
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants