From 59c1602daddcbd4bd959d76694d9907164ba8add Mon Sep 17 00:00:00 2001 From: joshuarli Date: Mon, 21 Sep 2026 10:35:52 -0700 Subject: [PATCH 1/2] chore: migrate off getsentry/action-github-app-token to actions/create-github-app-token --- .github/workflows/getsentry-dispatch.yml | 6 +++--- .github/workflows/pre-commit.yml | 6 +++--- .github/workflows/sentry-pull-request-bot.yml | 6 +++--- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/getsentry-dispatch.yml b/.github/workflows/getsentry-dispatch.yml index e42bc5c6b31b..53e93d034357 100644 --- a/.github/workflows/getsentry-dispatch.yml +++ b/.github/workflows/getsentry-dispatch.yml @@ -57,11 +57,11 @@ jobs: --paginate | python3 .github/workflows/scripts/parse-pr-files.py >> "$GITHUB_OUTPUT" - name: getsentry token - uses: getsentry/action-github-app-token@5c1e90706fe007857338ac1bfbd7a4177db2f789 # v4.0.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 id: getsentry with: - app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} - private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} + private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - name: Wait for PR merge commit uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 5b9e08fcdb3d..b242c6a1cb7a 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -36,11 +36,11 @@ jobs: steps: - # get a non-default github token so that any changes are verified by CI if: env.SECRET_ACCESS == 'true' - uses: getsentry/action-github-app-token@5c1e90706fe007857338ac1bfbd7a4177db2f789 # v4.0.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 id: token with: - app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} - private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} + private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Get changed files id: changes diff --git a/.github/workflows/sentry-pull-request-bot.yml b/.github/workflows/sentry-pull-request-bot.yml index 8ff4d72199ff..78f59b07eea6 100644 --- a/.github/workflows/sentry-pull-request-bot.yml +++ b/.github/workflows/sentry-pull-request-bot.yml @@ -43,10 +43,10 @@ jobs: - name: Fetch getsentry token if: steps.org.outputs.result == 'true' id: getsentry - uses: getsentry/action-github-app-token@5c1e90706fe007857338ac1bfbd7a4177db2f789 # v4.0.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: - app_id: ${{ vars.SENTRY_INTERNAL_APP_ID }} - private_key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} + private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} - name: Wait for PR merge commit uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 From cc7bd650fcdda881fae2b263fb5612455fd3027a Mon Sep 17 00:00:00 2001 From: joshuarli Date: Mon, 21 Sep 2026 12:40:56 -0700 Subject: [PATCH 2/2] fix: scope token to sentry (current repo) and getsentry (dispatch target) --- .github/workflows/getsentry-dispatch.yml | 3 +++ .github/workflows/sentry-pull-request-bot.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/getsentry-dispatch.yml b/.github/workflows/getsentry-dispatch.yml index 53e93d034357..8708ec08c2eb 100644 --- a/.github/workflows/getsentry-dispatch.yml +++ b/.github/workflows/getsentry-dispatch.yml @@ -62,6 +62,9 @@ jobs: with: client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + repositories: | + sentry + getsentry - name: Wait for PR merge commit uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 diff --git a/.github/workflows/sentry-pull-request-bot.yml b/.github/workflows/sentry-pull-request-bot.yml index 78f59b07eea6..f8e8c1981404 100644 --- a/.github/workflows/sentry-pull-request-bot.yml +++ b/.github/workflows/sentry-pull-request-bot.yml @@ -47,6 +47,9 @@ jobs: with: client-id: ${{ vars.SENTRY_INTERNAL_APP_ID }} private-key: ${{ secrets.SENTRY_INTERNAL_APP_PRIVATE_KEY }} + repositories: | + sentry + getsentry - name: Wait for PR merge commit uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0