I think we should stop creating PATs associated with @nodejs-github-bot, and instead rely on the more secure alternative: GitHub App Tokens. I've created [a basic GitHub app](https://github.com/apps/nodejs-gha) that can be transferred into the org to replace @nodejs-github-bot. WDYT?
I think we should stop creating PATs associated with @nodejs-github-bot, and instead rely on the more secure alternative: GitHub App Tokens.
I've created a basic GitHub app that can be transferred into the org to replace @nodejs-github-bot.
WDYT?