From 536373354084212dfa0fb6ec77b5c320eae2273d Mon Sep 17 00:00:00 2001 From: joshuarli Date: Mon, 21 Sep 2026 10:36:11 -0700 Subject: [PATCH 1/2] chore: migrate off getsentry/action-github-app-token to actions/create-github-app-token --- .github/workflows/react-to-product-owners-yml-changes.yml | 6 +++--- .github/workflows/test.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/react-to-product-owners-yml-changes.yml b/.github/workflows/react-to-product-owners-yml-changes.yml index b3d08d9e518f02..7cdda1db11dcda 100644 --- a/.github/workflows/react-to-product-owners-yml-changes.yml +++ b/.github/workflows/react-to-product-owners-yml-changes.yml @@ -17,10 +17,10 @@ jobs: - name: Get an auth token id: token - uses: getsentry/action-github-app-token@97c9e23528286821f97fba885c1b1123284b29cc # v2.0.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: - app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} - private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} + private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - name: React to product-owners.yml changes shell: bash diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index d6fb99b5b3f7a6..e2ba00b7301e67 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -19,11 +19,11 @@ jobs: - name: Internal github app token id: token - uses: getsentry/action-github-app-token@97c9e23528286821f97fba885c1b1123284b29cc # v2.0.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 continue-on-error: true with: - app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} - private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} + private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - uses: pnpm/action-setup@02f6c237bd2518259fed6c71566509edfb3f2b74 # v4 From 34d86cb005ecfee582bf0b8437db18b2f5adfaf1 Mon Sep 17 00:00:00 2001 From: joshuarli Date: Mon, 21 Sep 2026 12:39:58 -0700 Subject: [PATCH 2/2] fix: scope token to security-as-code (read) and this repo (push+PR) instead of repo-default --- .github/workflows/react-to-product-owners-yml-changes.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/react-to-product-owners-yml-changes.yml b/.github/workflows/react-to-product-owners-yml-changes.yml index 7cdda1db11dcda..e6b771c046477a 100644 --- a/.github/workflows/react-to-product-owners-yml-changes.yml +++ b/.github/workflows/react-to-product-owners-yml-changes.yml @@ -21,6 +21,9 @@ jobs: with: client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + repositories: | + security-as-code + sentry-docs - name: React to product-owners.yml changes shell: bash