From 30dc84727e1bae2f8e1bf0c32d32fd1b6b2a2930 Mon Sep 17 00:00:00 2001 From: "michael.armitage" Date: Thu, 16 Jul 2026 10:06:38 +0100 Subject: [PATCH] fix(ci): use the GitHub App client ID Summary: - switch the deployment token action to its supported client-id input - document and lint the new repository variable name Rationale: - remove the remaining deprecated app-id input warning - retain the existing App installation and private-key credential Tests: - COLUMNS=240 LINES=60 make -C elixir all - actionlint -config-file .github/actionlint.yaml Co-authored-by: Codex --- .github/actionlint.yaml | 2 +- .github/workflows/publish-shared.yml | 2 +- ACTIVEVIAM.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml index d3d3f1f1d5..3c020f2a25 100644 --- a/.github/actionlint.yaml +++ b/.github/actionlint.yaml @@ -1,2 +1,2 @@ config-variables: - - SYMPHONY_DEPLOY_APP_ID + - SYMPHONY_DEPLOY_CLIENT_ID diff --git a/.github/workflows/publish-shared.yml b/.github/workflows/publish-shared.yml index 1f238a0416..779db164b2 100644 --- a/.github/workflows/publish-shared.yml +++ b/.github/workflows/publish-shared.yml @@ -129,7 +129,7 @@ jobs: id: app-token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: - app-id: ${{ vars.SYMPHONY_DEPLOY_APP_ID }} + client-id: ${{ vars.SYMPHONY_DEPLOY_CLIENT_ID }} private-key: ${{ secrets.SYMPHONY_DEPLOY_APP_PRIVATE_KEY }} owner: activeviam repositories: shared-infrastructure diff --git a/ACTIVEVIAM.md b/ACTIVEVIAM.md index 57c5583713..df81b0277f 100644 --- a/ACTIVEVIAM.md +++ b/ACTIVEVIAM.md @@ -170,7 +170,7 @@ would expand the trust boundary unnecessarily. The App is installed only on activeviam/shared-infrastructure with repository contents and pull-request read/write access. The source repository holds: -- Actions variable SYMPHONY_DEPLOY_APP_ID +- Actions variable SYMPHONY_DEPLOY_CLIENT_ID - Actions secret SYMPHONY_DEPLOY_APP_PRIVATE_KEY This deployment App is intentionally separate from the runtime App mounted in EKS. Giving the