Skip to content

Conversation

@gkirok
Copy link
Contributor

@gkirok gkirok commented Dec 22, 2025

πŸ“ Description

Replaced personal access tokens with GitHub App tokens throughout the release workflow for improved security and granular permissions management.


πŸ› οΈ Changes Made

  • Updated all token generation steps to use actions/create-github-app-token@v2
  • Replaced hardcoded tokens with dynamically generated GitHub App tokens
  • Configured proper app ID and private key secrets for token generation
  • Updated token references across all jobs (prepare-inputs, publish-to-pypi, create-releases, update-tutorials, update-demos, update-release-notes)

βœ… Checklist

  • I updated the documentation (if applicable)
  • I have partial tested the changes in this Run
  • I confirmed whether my changes are covered by system tests
    • If yes, I ran all relevant system tests and ensured they passed before submitting this PR
    • I updated existing system tests and/or added new ones if needed to cover my changes
  • If I introduced a deprecation:

πŸ§ͺ Testing

  • Verified that all workflow steps can access the GitHub App token properly
  • Tested token generation with correct permissions for repository operations
  • Confirmed that checkout operations work with the new token approach
  • Validated that cross-repository operations (UI repo) function correctly

πŸ”— References

@gkirok gkirok requested a review from liranbg as a code owner December 22, 2025 16:03
@liranbg liranbg merged commit c966cd6 into mlrun:development Dec 22, 2025
19 of 22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants