Skip to content

fix: point publish.yml at the org App secrets that exist #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vaibhavkumar-deriv merged 1 commit into from
Sep 3, 2026
Merged

fix: point publish.yml at the org App secrets that exist #5

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,8 @@
#
# INERT until the promotion App credentials are provisioned. It carries no live
# secrets: the GitHub App credentials
# (PROMOTION_APP_ID / PROMOTION_APP_PRIVATE_KEY) and the expected source repo
# (the org App pair CLIENT_ID_GHAPP_WRITE / PRIVATE_KEY_GHAPP_WRITE, which this
# repo must be granted access to) and the expected source repo
# (PROMOTION_SOURCE_REPO) are provisioned when the promotion App lands. The
# first population is a MANUAL, human-reviewed push of the staged tree; this
# receiver becomes the steady-state path afterwards.
Expand Down Expand Up @@ -72,8 +73,8 @@ jobs:
id: app-token
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v2.0.2
with:
app-id: ${{ secrets.PROMOTION_APP_ID }}
private-key: ${{ secrets.PROMOTION_APP_PRIVATE_KEY }}
app-id: ${{ secrets.CLIENT_ID_GHAPP_WRITE }}
private-key: ${{ secrets.PRIVATE_KEY_GHAPP_WRITE }}
# The App is installed on both the source (contents:read) and this repo
# (contents:write). Scope the token to the source for the download.
owner: ${{ github.repository_owner }}
Expand Down
Loading