feat: permissions by gr2m · Pull Request #168 · actions/create-github-app-token

gr2m · 2024-09-05T23:07:05Z

closes#3

Load app-permissions from schema exported by @octokit/openapi
Update documentation in README.md
Implement the permissions_* inputs in the action code

could be done as follow ups:

Install https://github.com/apps/octokit-release-notifier and configure it to create repository dispatch events for the octokit/openapi repository
Setup a GitHub Actions workflow triggered by said dispatch event to update the action.yml file and create a pull request if there is any change using https://github.com/gr2m/create-or-update-pull-request-action/

…ithub.com/octokit/app-permissions/blob/main/generated/api.github.com.json Co-Authored-By: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>

gr2m · 2025-02-07T20:47:34Z

We ran into a few blockers trying to fix the update automation for https://github.com/octokit/app-permissions, see octokit/app-permissions#262

For now, we will just update the action.yml manually and implement the feature, and postpone all the automation

gr2m · 2025-03-13T19:40:53Z

We finally had a time to catch up and assess where we stand. We will now

add https://github.com/octokit/openapi as dev dependency
Create a cache file (e.g. build/app-permissions.json) in this repository which will only contain the schema for "app-permissions" for easier debugging
Use thebuild/app-permissions.json file in this repository as source to generated / update the action.yml file

…ermissions

parkerbxyz

🚀

# [1.12.0](v1.11.7...v1.12.0) (2025-03-27) ### Features * permissions ([#168](#168)) ([0e0aa99](0e0aa99))

create-app-token-action-releaser · 2025-03-27T19:01:50Z

🎉 This PR is included in version 1.12.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

WIP script to updateaction.ymlwith permissions based onhttps://g…
580a7f4
…ithub.com/octokit/app-permissions/blob/main/generated/api.github.com.json Co-Authored-By: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>

gr2m force-pushed the permissions_inputs branch from 2804fe1 to 580a7f4Compare September 5, 2024 23:09

gr2m mentioned this pull request Sep 13, 2024
Add scoped tokens #171
Closed

gr2m mentioned this pull request Oct 7, 2024
Support custom permissions #3
Closed

gr2m mentioned this pull request Jan 30, 2025
refactor: sort keys deeply octokit/app-permissions#261
Merged

gr2m added 4 commits March 13, 2025 12:44

build(deps): @octokit/openapi
165aac0

build(package): lock file
5275c2e

build: update script to utilize @octokit/openapi as source of app p…
f48303c
…ermissions

build: update action.yml by running script
766bb55

gr2m force-pushed the permissions_inputs branch from 2baee4e to 766bb55Compare March 13, 2025 20:02

gr2m changed the title ~~WIP script to update action.yml with permissions based on https://github.com/octokit/app-permissions/blob/main/generated/api.github.com.json~~build(script): update permission-* inputs in action.yml based on @octokit/openapiMar 13, 2025

parkerbxyz added 5 commits March 13, 2025 13:11

build: end generated file with newline
be692b8

build: use Intl.ListFormat to format permission access values
f4d40fc

style: format with Prettier
b17ed31

Merge branch 'main' into permissions_inputs
d1c86cd

build: swap order of description and valid values in action.yml
3674124

parkerbxyz added this to the v2 milestone Mar 20, 2025

add implementation of permissions inputs (#217)
7bc649b

gr2m commented Mar 25, 2025
View reviewed changes

Comment threadCONTRIBUTING.md

gr2m marked this pull request as ready for review March 25, 2025 19:09

gr2m requested a review from a team as a code owner March 25, 2025 19:09

gr2m changed the title ~~build(script): update permission-* inputs in action.yml based on @octokit/openapi~~feat: permissionsMar 25, 2025

parkerbxyz reviewed Mar 27, 2025
View reviewed changes

Comment threadmain.js

Add comment to explain why we are exporting main
d64ecbb

parkerbxyz approved these changes Mar 27, 2025
View reviewed changes

parkerbxyz enabled auto-merge (squash) March 27, 2025 18:59

Merge branch 'main' into permissions_inputs
f3280eb

parkerbxyz merged commit 0e0aa99 into mainMar 27, 2025

parkerbxyz deleted the permissions_inputs branch March 27, 2025 19:00

create-app-token-action-releaserBot pushed a commit that referenced this pull request Mar 27, 2025
build(release): 1.12.0 [skip ci]
d72941d
# [1.12.0](v1.11.7...v1.12.0) (2025-03-27) ### Features * permissions ([#168](#168)) ([0e0aa99](0e0aa99))

create-app-token-action-releaserBot added the released label Mar 27, 2025

parkerbxyz mentioned this pull request Mar 27, 2025
Auto-update permission inputs in actions.yml #220
Closed

Yang-33 mentioned this pull request Mar 28, 2025
Fix typo in input description #221
Closed

polothy mentioned this pull request Apr 1, 2025
Switch from tibdex/github-app-token to create-github-app-token action projen/projen#3111
Closed

wolfgangwalther mentioned this pull request Apr 7, 2025
Consider using more fine-grained permissions with actions/create-github-app-tokenNixOS/nixpkgs#396875
Closed

coderabbitaiBot mentioned this pull request Mar 30, 2026
RHOAIENG-55755 | feat: Pin RHOAI manifest SHAs to enable automated updates opendatahub-io/opendatahub-operator#3359
Merged
8 tasks

create-app-token-action-releaserBot mentioned this pull request May 8, 2026
chore(main): release create-github-app-token 4.0.0 #368
Closed

This was referenced May 13, 2026
feat: add Claude Preflight Agent GitHub Action opendatahub-io/odh-dashboard#7549
Merged
Add fuzzer workflow analysis pipeline valkey-io/valkey-ci-agent#2
Merged

coderabbitaiBot mentioned this pull request Jun 20, 2026
Enforce quality tools apphane-dev/nehir#90
Merged
3 tasks

This was referenced Jun 28, 2026
FEAT-22: Github Ci Cd Automation adooone/paper-camp#1
Merged
Branded bot identity prowl-tools/prowl-code-review#81
Merged

This was referenced Jul 7, 2026
docs: switch spectrum-ts docs to git source photon-hq/docs#111
Merged
chore(ci): cache apt deps, time-balance test shards, notify Discord on publish letsrevel/revel-backend#650
Merged

coderabbitaiBot mentioned this pull request Jul 22, 2026
feat(bench-api): bench-action comment relay worker at api.bench.soroush.tech soroush-tech/core#310
Merged

This was referenced Jul 31, 2026
Auto-publish scheduled blog posts on their date valkey-io/valkey-io.github.io#622
Merged
ci: add DeepSeek-powered issue triage bot LargeModGames/spotatui#415
Merged
feat: automate the release cut with release-please OpenSDLC-Dev/managed-agent-console#45
Merged

coderabbitaiBot mentioned this pull request Aug 8, 2026
ci: guard the Flatpak sources against lockfile drift InstaZDLL/WaveFlow#490
Merged

Navigation Menu

Uh oh!

feat: permissions - #168

feat: permissions#168
parkerbxyz merged 13 commits into
mainfrom
permissions_inputs

gr2m commented Sep 5, 2024•
edited
Loading

Uh oh!

gr2m commented Feb 7, 2025

Uh oh!

gr2m commented Mar 13, 2025

Uh oh!

Uh oh!

Uh oh!

parkerbxyz left a comment

Uh oh!

create-app-token-action-releaserBot commented Mar 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

gr2m commented Sep 5, 2024• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gr2m commented Feb 7, 2025

Uh oh!

gr2m commented Mar 13, 2025

Uh oh!

Uh oh!

Uh oh!

parkerbxyz left a comment

Choose a reason for hiding this comment

Uh oh!

create-app-token-action-releaserBot commented Mar 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

gr2m commented Sep 5, 2024•
edited
Loading