From f3065ab947d8b23542eb703aa288b923ae568962 Mon Sep 17 00:00:00 2001 From: Martin Fousek Date: Wed, 16 Sep 2026 11:37:55 +0200 Subject: [PATCH] ci: use GitHub App token instead of PAT for developer-hub dispatch The developer-hub repository_dispatch trigger relied on a static PAT (DISPATCH_DEVELOPER_HUB_TOKEN) that stopped working after developer-hub moved to the Phrase-Engineering org. Mint a short-lived GitHub App installation token instead, scoped to Phrase-Engineering/developer-hub. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01JQGCZVGJw6LmE1EGc8mW2x --- .github/workflows/developer-hub.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/.github/workflows/developer-hub.yml b/.github/workflows/developer-hub.yml index c8cf61033..88607d698 100644 --- a/.github/workflows/developer-hub.yml +++ b/.github/workflows/developer-hub.yml @@ -10,10 +10,19 @@ jobs: if: github.event.pull_request.merged == true && github.event.pull_request.base.ref == 'main' runs-on: ubuntu-latest steps: + - name: Developer Hub App token + id: app-token + uses: actions/create-github-app-token@v3 + with: + app-id: ${{ secrets.DEVELOPER_HUB_APP_ID }} + private-key: ${{ secrets.DEVELOPER_HUB_APP_PRIVATE_KEY }} + owner: Phrase-Engineering + repositories: developer-hub + - name: Send repository_dispatch to Phrase-Engineering/developer-hub uses: peter-evans/repository-dispatch@0eae9e597ebc81bcc8c2220e34ddff4bc7c769b3 with: - token: ${{ secrets.DISPATCH_DEVELOPER_HUB_TOKEN }} + token: ${{ steps.app-token.outputs.token }} repository: Phrase-Engineering/developer-hub event-type: trigger-strings-workflow client-payload: >-