Problem
service-moderation cannot publish its generated OpenAPI snapshot because it does not have the GitHub App credentials required by the reusable publisher workflow.
The source service successfully generates, validates, and uploads openapi.json. The reusable publish-openapi-snapshot.yml workflow then fails in actions/create-github-app-token@v3 before checking out groundsgg/api-reference:
The 'client-id' (or deprecated 'app-id') input must be set to a non-empty string.
This reproduced on both published service-moderation releases:
Confirmed comparison
service-permissions uses the same caller shape and the same reusable workflow successfully:
service-moderation currently has neither OPENAPI_PUBLISHER_APP_ID nor OPENAPI_PUBLISHER_PRIVATE_KEY; its only repository secret is RELEASE_PLEASE_TOKEN. The action validates the empty App ID first, so the missing private key is not reached yet.
Expected outcome
- Prefer centrally managed organization variable and secret visibility for every approved OpenAPI-producing service, including
service-permissions and service-moderation; alternatively configure the two credentials repository-locally for moderation.
- Use the non-deprecated
client-id action input in the reusable workflow.
- Re-run the failed
v0.1.1 publication successfully.
- Confirm the snapshot PR is created or updated in
groundsgg/api-reference.
No application image or moderation runtime deployment is blocked by this documentation-publication failure.
Problem
service-moderationcannot publish its generated OpenAPI snapshot because it does not have the GitHub App credentials required by the reusable publisher workflow.The source service successfully generates, validates, and uploads
openapi.json. The reusablepublish-openapi-snapshot.ymlworkflow then fails inactions/create-github-app-token@v3before checking outgroundsgg/api-reference:This reproduced on both published service-moderation releases:
v0.1.0: https://github.com/groundsgg/service-moderation/actions/runs/30453917943v0.1.1: https://github.com/groundsgg/service-moderation/actions/runs/30460968594Confirmed comparison
service-permissionsuses the same caller shape and the same reusable workflow successfully:OPENAPI_PUBLISHER_APP_ID=4400336OPENAPI_PUBLISHER_PRIVATE_KEYservice-moderationcurrently has neitherOPENAPI_PUBLISHER_APP_IDnorOPENAPI_PUBLISHER_PRIVATE_KEY; its only repository secret isRELEASE_PLEASE_TOKEN. The action validates the empty App ID first, so the missing private key is not reached yet.Expected outcome
service-permissionsandservice-moderation; alternatively configure the two credentials repository-locally for moderation.client-idaction input in the reusable workflow.v0.1.1publication successfully.groundsgg/api-reference.No application image or moderation runtime deployment is blocked by this documentation-publication failure.