076e9480ca
Bumps [@octokit/openapi](https://github.com/octokit/openapi) from 21.0.0 to 22.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/octokit/openapi/releases"><code>@octokit/openapi</code>'s releases</a>.</em></p> <blockquote> <h2>v22.0.0</h2> <h1><a href="https://github.com/octokit/openapi/compare/v21.0.0...v22.0.0">22.0.0</a> (2025-12-09)</h1> <h3>Features</h3> <ul> <li>drop projects-classic endpoints, add GitHub API endpoints: cache limits (retention & storage) for repos/orgs/enterprises, billing budgets & usage, artifacts deployment metadata, and projectsV2 drafts & fields (<a href="https://redirect.github.com/octokit/openapi/issues/518">#518</a>) (<a href="b0c44a4ab1">b0c44a4</a>)</li> </ul> <h3>BREAKING CHANGES</h3> <ul> <li>Removed <code>/orgs/{org}/projects</code></li> <li>Removed <code>/orgs/{org}/settings/billing/actions</code></li> <li>Removed <code>/orgs/{org}/settings/billing/packages</code></li> <li>Removed <code>/orgs/{org}/settings/billing/shared-storage</code></li> <li>Removed <code>/orgs/{org}/teams/{team_slug}/projects</code></li> <li>Removed <code>/orgs/{org}/teams/{team_slug}/projects/{project_id}</code></li> <li>Removed <code>/projects/columns/{column_id}</code></li> <li>Removed <code>/projects/columns/{column_id}/moves</code></li> <li>Removed <code>/projects/{project_id}</code></li> <li>Removed <code>/projects/{project_id}/collaborators</code></li> <li>Removed <code>/projects/{project_id}/collaborators/{username}</code></li> <li>Removed <code>/projects/{project_id}/collaborators/{username}/permission</code></li> <li>Removed <code>/repos/{owner}/{repo}/projects</code></li> <li>Removed <code>/teams/{team_id}/projects</code></li> <li>Removed <code>/teams/{team_id}/projects/{project_id}</code></li> <li>Removed <code>/user/projects</code></li> <li>Removed <code>/users/{username}/projects</code></li> <li>Removed <code>/users/{username}/settings/billing/actions</code></li> <li>Removed <code>/users/{username}/settings/billing/packages</code></li> <li>Removed <code>/users/{username}/settings/billing/shared-storage</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="6f63b86ab7"><code>6f63b86</code></a> build(deps): lock file maintenance (<a href="https://redirect.github.com/octokit/openapi/issues/520">#520</a>)</li> <li><a href="b0c44a4ab1"><code>b0c44a4</code></a> feat: drop projects-classic endpoints, add GitHub API endpoints: cache limits...</li> <li><a href="a8043eb055"><code>a8043eb</code></a> ci(action): update actions/checkout action to v6 (<a href="https://redirect.github.com/octokit/openapi/issues/519">#519</a>)</li> <li><a href="af315cd293"><code>af315cd</code></a> build(deps): lock file maintenance (<a href="https://redirect.github.com/octokit/openapi/issues/514">#514</a>)</li> <li><a href="170f3965b9"><code>170f396</code></a> build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (<a href="https://redirect.github.com/octokit/openapi/issues/516">#516</a>)</li> <li><a href="077a1b94a2"><code>077a1b9</code></a> build(deps): lock file maintenance (<a href="https://redirect.github.com/octokit/openapi/issues/508">#508</a>)</li> <li><a href="cfca956d30"><code>cfca956</code></a> ci(action): update github/codeql-action action to v4 (<a href="https://redirect.github.com/octokit/openapi/issues/510">#510</a>)</li> <li><a href="f15da93d54"><code>f15da93</code></a> ci(action): update peter-evans/create-or-update-comment action to v5 (<a href="https://redirect.github.com/octokit/openapi/issues/509">#509</a>)</li> <li><a href="64bef332f5"><code>64bef33</code></a> chore(deps): update dependency map-obj to v6 (<a href="https://redirect.github.com/octokit/openapi/issues/507">#507</a>)</li> <li><a href="4e8e223e56"><code>4e8e223</code></a> chore(deps): update dependency github-enterprise-server-versions to v3 (<a href="https://redirect.github.com/octokit/openapi/issues/511">#511</a>)</li> <li>Additional commits viewable in <a href="https://github.com/octokit/openapi/compare/v21.0.0...v22.0.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@octokit/openapi</code> since your current version.</p> </details> <br /> Resolves https://github.com/github/gh-aw/issues/18921. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
150 lines
11 KiB
YAML
150 lines
11 KiB
YAML
name: "Create GitHub App Token"
|
|
description: "GitHub Action for creating a GitHub App installation access token"
|
|
author: "Gregor Martynus and Parker Brown"
|
|
branding:
|
|
icon: "lock"
|
|
color: "gray-dark"
|
|
inputs:
|
|
app-id:
|
|
description: "GitHub App ID"
|
|
required: true
|
|
private-key:
|
|
description: "GitHub App private key"
|
|
required: true
|
|
owner:
|
|
description: "The owner of the GitHub App installation (defaults to current repository owner)"
|
|
required: false
|
|
repositories:
|
|
description: "Comma or newline-separated list of repositories to install the GitHub App on (defaults to current repository if owner is unset)"
|
|
required: false
|
|
skip-token-revoke:
|
|
description: "If true, the token will not be revoked when the current job is complete"
|
|
required: false
|
|
default: "false"
|
|
# Make GitHub API configurable to support non-GitHub Cloud use cases
|
|
# see https://github.com/actions/create-github-app-token/issues/77
|
|
github-api-url:
|
|
description: The URL of the GitHub REST API.
|
|
default: ${{ github.api_url }}
|
|
# <START GENERATED PERMISSIONS INPUTS>
|
|
permission-actions:
|
|
description: "The level of permission to grant the access token for GitHub Actions workflows, workflow runs, and artifacts. Can be set to 'read' or 'write'."
|
|
permission-administration:
|
|
description: "The level of permission to grant the access token for repository creation, deletion, settings, teams, and collaborators creation. Can be set to 'read' or 'write'."
|
|
permission-artifact-metadata:
|
|
description: "The level of permission to grant the access token to create and retrieve build artifact metadata records. Can be set to 'read' or 'write'."
|
|
permission-attestations:
|
|
description: "The level of permission to create and retrieve the access token for repository attestations. Can be set to 'read' or 'write'."
|
|
permission-checks:
|
|
description: "The level of permission to grant the access token for checks on code. Can be set to 'read' or 'write'."
|
|
permission-codespaces:
|
|
description: "The level of permission to grant the access token to create, edit, delete, and list Codespaces. Can be set to 'read' or 'write'."
|
|
permission-contents:
|
|
description: "The level of permission to grant the access token for repository contents, commits, branches, downloads, releases, and merges. Can be set to 'read' or 'write'."
|
|
permission-custom-properties-for-organizations:
|
|
description: "The level of permission to grant the access token to view and edit custom properties for an organization, when allowed by the property. Can be set to 'read' or 'write'."
|
|
permission-dependabot-secrets:
|
|
description: "The level of permission to grant the access token to manage Dependabot secrets. Can be set to 'read' or 'write'."
|
|
permission-deployments:
|
|
description: "The level of permission to grant the access token for deployments and deployment statuses. Can be set to 'read' or 'write'."
|
|
permission-discussions:
|
|
description: "The level of permission to grant the access token for discussions and related comments and labels. Can be set to 'read' or 'write'."
|
|
permission-email-addresses:
|
|
description: "The level of permission to grant the access token to manage the email addresses belonging to a user. Can be set to 'read' or 'write'."
|
|
permission-enterprise-custom-properties-for-organizations:
|
|
description: "The level of permission to grant the access token for organization custom properties management at the enterprise level. Can be set to 'read', 'write', or 'admin'."
|
|
permission-environments:
|
|
description: "The level of permission to grant the access token for managing repository environments. Can be set to 'read' or 'write'."
|
|
permission-followers:
|
|
description: "The level of permission to grant the access token to manage the followers belonging to a user. Can be set to 'read' or 'write'."
|
|
permission-git-ssh-keys:
|
|
description: "The level of permission to grant the access token to manage git SSH keys. Can be set to 'read' or 'write'."
|
|
permission-gpg-keys:
|
|
description: "The level of permission to grant the access token to view and manage GPG keys belonging to a user. Can be set to 'read' or 'write'."
|
|
permission-interaction-limits:
|
|
description: "The level of permission to grant the access token to view and manage interaction limits on a repository. Can be set to 'read' or 'write'."
|
|
permission-issues:
|
|
description: "The level of permission to grant the access token for issues and related comments, assignees, labels, and milestones. Can be set to 'read' or 'write'."
|
|
permission-members:
|
|
description: "The level of permission to grant the access token for organization teams and members. Can be set to 'read' or 'write'."
|
|
permission-merge-queues:
|
|
description: "The level of permission to grant the access token to manage the merge queues for a repository. Can be set to 'read' or 'write'."
|
|
permission-metadata:
|
|
description: "The level of permission to grant the access token to search repositories, list collaborators, and access repository metadata. Can be set to 'read' or 'write'."
|
|
permission-organization-administration:
|
|
description: "The level of permission to grant the access token to manage access to an organization. Can be set to 'read' or 'write'."
|
|
permission-organization-announcement-banners:
|
|
description: "The level of permission to grant the access token to view and manage announcement banners for an organization. Can be set to 'read' or 'write'."
|
|
permission-organization-copilot-seat-management:
|
|
description: "The level of permission to grant the access token for managing access to GitHub Copilot for members of an organization with a Copilot Business subscription. This property is in public preview and is subject to change. Can be set to 'write'."
|
|
permission-organization-custom-org-roles:
|
|
description: "The level of permission to grant the access token for custom organization roles management. Can be set to 'read' or 'write'."
|
|
permission-organization-custom-properties:
|
|
description: "The level of permission to grant the access token for repository custom properties management at the organization level. Can be set to 'read', 'write', or 'admin'."
|
|
permission-organization-custom-roles:
|
|
description: "The level of permission to grant the access token for custom repository roles management. Can be set to 'read' or 'write'."
|
|
permission-organization-events:
|
|
description: "The level of permission to grant the access token to view events triggered by an activity in an organization. Can be set to 'read'."
|
|
permission-organization-hooks:
|
|
description: "The level of permission to grant the access token to manage the post-receive hooks for an organization. Can be set to 'read' or 'write'."
|
|
permission-organization-packages:
|
|
description: "The level of permission to grant the access token for organization packages published to GitHub Packages. Can be set to 'read' or 'write'."
|
|
permission-organization-personal-access-token-requests:
|
|
description: "The level of permission to grant the access token for viewing and managing fine-grained personal access tokens that have been approved by an organization. Can be set to 'read' or 'write'."
|
|
permission-organization-personal-access-tokens:
|
|
description: "The level of permission to grant the access token for viewing and managing fine-grained personal access token requests to an organization. Can be set to 'read' or 'write'."
|
|
permission-organization-plan:
|
|
description: "The level of permission to grant the access token for viewing an organization's plan. Can be set to 'read'."
|
|
permission-organization-projects:
|
|
description: "The level of permission to grant the access token to manage organization projects and projects public preview (where available). Can be set to 'read', 'write', or 'admin'."
|
|
permission-organization-secrets:
|
|
description: "The level of permission to grant the access token to manage organization secrets. Can be set to 'read' or 'write'."
|
|
permission-organization-self-hosted-runners:
|
|
description: "The level of permission to grant the access token to view and manage GitHub Actions self-hosted runners available to an organization. Can be set to 'read' or 'write'."
|
|
permission-organization-user-blocking:
|
|
description: "The level of permission to grant the access token to view and manage users blocked by the organization. Can be set to 'read' or 'write'."
|
|
permission-packages:
|
|
description: "The level of permission to grant the access token for packages published to GitHub Packages. Can be set to 'read' or 'write'."
|
|
permission-pages:
|
|
description: "The level of permission to grant the access token to retrieve Pages statuses, configuration, and builds, as well as create new builds. Can be set to 'read' or 'write'."
|
|
permission-profile:
|
|
description: "The level of permission to grant the access token to manage the profile settings belonging to a user. Can be set to 'write'."
|
|
permission-pull-requests:
|
|
description: "The level of permission to grant the access token for pull requests and related comments, assignees, labels, milestones, and merges. Can be set to 'read' or 'write'."
|
|
permission-repository-custom-properties:
|
|
description: "The level of permission to grant the access token to view and edit custom properties for a repository, when allowed by the property. Can be set to 'read' or 'write'."
|
|
permission-repository-hooks:
|
|
description: "The level of permission to grant the access token to manage the post-receive hooks for a repository. Can be set to 'read' or 'write'."
|
|
permission-repository-projects:
|
|
description: "The level of permission to grant the access token to manage repository projects, columns, and cards. Can be set to 'read', 'write', or 'admin'."
|
|
permission-secret-scanning-alerts:
|
|
description: "The level of permission to grant the access token to view and manage secret scanning alerts. Can be set to 'read' or 'write'."
|
|
permission-secrets:
|
|
description: "The level of permission to grant the access token to manage repository secrets. Can be set to 'read' or 'write'."
|
|
permission-security-events:
|
|
description: "The level of permission to grant the access token to view and manage security events like code scanning alerts. Can be set to 'read' or 'write'."
|
|
permission-single-file:
|
|
description: "The level of permission to grant the access token to manage just a single file. Can be set to 'read' or 'write'."
|
|
permission-starring:
|
|
description: "The level of permission to grant the access token to list and manage repositories a user is starring. Can be set to 'read' or 'write'."
|
|
permission-statuses:
|
|
description: "The level of permission to grant the access token for commit statuses. Can be set to 'read' or 'write'."
|
|
permission-team-discussions:
|
|
description: "The level of permission to grant the access token to manage team discussions and related comments. Can be set to 'read' or 'write'."
|
|
permission-vulnerability-alerts:
|
|
description: "The level of permission to grant the access token to manage Dependabot alerts. Can be set to 'read' or 'write'."
|
|
permission-workflows:
|
|
description: "The level of permission to grant the access token to update GitHub Actions workflow files. Can be set to 'write'."
|
|
# <END GENERATED PERMISSIONS INPUTS>
|
|
outputs:
|
|
token:
|
|
description: "GitHub installation access token"
|
|
installation-id:
|
|
description: "GitHub App installation ID"
|
|
app-slug:
|
|
description: "GitHub App slug"
|
|
runs:
|
|
using: "node24"
|
|
main: "dist/main.cjs"
|
|
post: "dist/post.cjs"
|