From cd737b4be96d174049250fe0641664cb65e0cdea Mon Sep 17 00:00:00 2001 From: sasjs-dev Date: Mon, 24 Aug 2026 14:04:32 +0100 Subject: [PATCH 1/2] fix: read APP_ID from org secrets instead of repo vars The Generate GitHub App token step failed with '[@octokit/auth-app] appId option is required' because it referenced vars.APP_ID, but APP_ID was created as an organisation secret two months ago, not a repository variable. Point app-id at secrets.APP_ID. Also gate the token-generation and debug steps on new_release_published so docs-site config issues cannot fail a publish run that produced no release, and add a temporary debug step printing input lengths (never values) to confirm secret visibility. --- .github/workflows/main.yml | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index c283568..b31e1b0 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -82,11 +82,23 @@ jobs: # need long duration token per https://github.com/sasjs/server/issues/307 # npx @sasjs/cli run sasjsbuild/jobs/utils/create_sas_package.sas -t server + - name: Debug app token inputs (no secret values printed) + if: steps.makerelease.outputs.new_release_published == 'true' + env: + APP_ID_VAR: ${{ vars.APP_ID }} + APP_ID_SECRET: ${{ secrets.APP_ID }} + APP_KEY_SECRET: ${{ secrets.APP_PRIVATE_KEY }} + run: | + echo "vars.APP_ID length: ${#APP_ID_VAR}" + echo "secrets.APP_ID length: ${#APP_ID_SECRET}" + echo "secrets.APP_PRIVATE_KEY length: ${#APP_KEY_SECRET}" + - name: Generate GitHub App token for docs site id: app-token + if: steps.makerelease.outputs.new_release_published == 'true' uses: actions/create-github-app-token@v2 with: - app-id: ${{ vars.APP_ID }} + app-id: ${{ secrets.APP_ID }} private-key: ${{ secrets.APP_PRIVATE_KEY }} repositories: core.github.io From 28355ec78e4eda082ae9969bd8ef99419c9aaf0e Mon Sep 17 00:00:00 2001 From: github-actions Date: Mon, 24 Aug 2026 13:05:18 +0000 Subject: [PATCH 2/2] chore: updating all.sas