Skip to content

feat(2036): add-to-kanban authenticates as the App #525

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
LukasWodka merged 1 commit into from
Aug 18, 2026
+18 −1
Merged

feat(2036): add-to-kanban authenticates as the App #525

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 18 additions & 1 deletion .github/workflows/add-to-kanban.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,24 @@ jobs:
add-to-project:
runs-on: ubuntu-latest
steps:
# Board writes authenticate as the tracebloc-release-train App (backend#2036),
# not a human's PAT. `owner:` yields an ORG-scoped installation token; a
# repo-scoped one cannot write the org project. No fallback to the PAT: a
# fallback would let a broken App path keep working silently.
#
# This workflow also fires on DEPENDABOT PRs, which GitHub gates on a separate
# secret scope -- both app secrets are set there too, or Dependabot PRs would
Comment thread
LukasWodka marked this conversation as resolved.
# stop reaching the board with `Input required and not supplied`.
- name: Mint an installation token
id: app-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
app-id: ${{ secrets.RELEASE_TRAIN_APP_ID }}
private-key: ${{ secrets.RELEASE_TRAIN_APP_PRIVATE_KEY }}
owner: ${{ github.repository_owner }}

- uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0
with:
project-url: https://github.com/orgs/tracebloc/projects/2
github-token: ${{ secrets.PROJECTS_KANBAN_TOKEN }}
github-token: ${{ steps.app-token.outputs.token }}

Loading