Use secret release app ID in workflow

juliusmarminge · juliusmarminge · commit e9de9fcd1131 · 2026-03-19T20:12:30.000-07:00
- Read the GitHub App ID from secrets instead of vars
- Keep the private key sourced from secrets
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -312,7 +312,7 @@ jobs:
         name: Mint release app token
         uses: actions/create-github-app-token@v2
         with:
-          app-id: ${{ vars.RELEASE_APP_ID }}
+          app-id: ${{ secrets.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
 
