-
Notifications
You must be signed in to change notification settings - Fork 646
ci: use primer integration app for status checks #7158
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates the status-checks workflow to use a GitHub App token instead of the default GITHUB_TOKEN for setting commit statuses when integration tests are skipped manually.
- Adds GitHub App token generation step using
create-github-app-tokenaction - Replaces
GITHUB_TOKENwith the generated app token for API operations
| uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 | ||
| with: | ||
| app-id: 902635 | ||
| owner: 'primer' |
Copilot
AI
Nov 6, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The repositories parameter should be added to the create-github-app-token action configuration to limit the token scope. Other workflows in this repository (e.g., .github/workflows/lock-release.yml) follow the pattern of including repositories: react when specifying owner: primer. This follows the principle of least privilege by restricting the token to only the necessary repository.
Suggested addition:
with:
app-id: 902635
owner: 'primer'
repositories: react
private-key: ${{ secrets.PRIMER_INTEGRATION_APP_PRIVATE_KEY }}| owner: 'primer' | |
| owner: 'primer' | |
| repositories: react |
Use the Primer Integration App for setting status checks so that required checks come from the same source.
Changelog
New
Changed
Removed
Rollout strategy
Update our workflow to use the Primer Integration App token for setting status checks. This should help fix our issues when requiring these status checks but GitHub Actions is reporting on them.