From 8f2ec06250a3962ec94b80a6cd38db2507f0fa5d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 19 Sep 2025 15:03:37 +0000
Subject: [PATCH 1/2] Initial plan


From 3becc9a38dfd1379d199c14081d3216460c1f8c2 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 19 Sep 2025 15:28:28 +0000
Subject: [PATCH 2/2] Replace tibdex/github-app-token with
 actions/create-github-app-token in all workflows

Co-authored-by: v1v <2871786+v1v@users.noreply.github.com>
---
 .github/workflows/addToProject.yml | 13 +++++--------
 .github/workflows/labeler.yml      | 11 ++++-------
 .github/workflows/update-specs.yml | 13 +++++--------
 3 files changed, 14 insertions(+), 23 deletions(-)

diff --git a/.github/workflows/addToProject.yml b/.github/workflows/addToProject.yml
index 52611a9..16e88e6 100644
--- a/.github/workflows/addToProject.yml
+++ b/.github/workflows/addToProject.yml
@@ -13,15 +13,12 @@ jobs:
     steps:
       - name: Get token
         id: get_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@v2
         with:
-          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-          permissions: >-
-            {
-              "organization_projects": "write",
-              "issues": "read"
-            }
+          app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permission-organization-projects: write
+          permission-issues: read
       - name: Get project data
         env:
           GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 0261c91..fb38000 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -17,14 +17,11 @@ jobs:
     steps:
     - name: Get token
       id: get_token
-      uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+      uses: actions/create-github-app-token@v2
       with:
-        app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-        private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-        permissions: >-
-          {
-            "members": "read"
-          }
+        app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+        private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+        permission-members: read
 
     - id: is_elastic_member
       uses: elastic/oblt-actions/github/is-member-of@v1
diff --git a/.github/workflows/update-specs.yml b/.github/workflows/update-specs.yml
index 3384f20..af2a692 100644
--- a/.github/workflows/update-specs.yml
+++ b/.github/workflows/update-specs.yml
@@ -21,15 +21,12 @@ jobs:
 
       - name: Get token
         id: get_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@v2
         with:
-          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-          permissions: >-
-            {
-              "contents": "write",
-              "pull_requests": "write"
-            }
+          app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permission-contents: write
+          permission-pull-requests: write
 
       - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with: