Skip to content

Use GitHub Actions token - #310

Merged
alixander merged 1 commit into
masterfrom
agent/use-actions-token
Aug 3, 2026
Merged

Use GitHub Actions token#310
alixander merged 1 commit into
masterfrom
agent/use-actions-token

Conversation

@alixander

Copy link
Copy Markdown
Contributor

Summary

  • replace the long-lived _GITHUB_TOKEN repository secret with the per-run github.token
  • explicitly grant workflows actions: read and contents: read
  • leave Slack/Discord webhook credentials unchanged

The old repository secret should be deleted only after this runs successfully on the protected default branch.

Validation

  • YAML parse
  • actionlint (excluding existing old-action-version warnings)
  • git diff --check
  • confirmed no _GITHUB_TOKEN references remain in the workflows

@alixander
alixander marked this pull request as ready for review August 3, 2026 17:28
@alixander
alixander merged commit c8e7fd1 into master Aug 3, 2026
12 checks passed
@alixander
alixander deleted the agent/use-actions-token branch August 3, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant