Thanks to visit codestin.com
Credit goes to github.com

Skip to content

ci: Use GITHUB_TOKEN for homebrew tap automation instead of PAT#26

Open
poiley wants to merge 1 commit intomainfrom
homebrew-automation-security-fix
Open

ci: Use GITHUB_TOKEN for homebrew tap automation instead of PAT#26
poiley wants to merge 1 commit intomainfrom
homebrew-automation-security-fix

Conversation

@poiley
Copy link
Collaborator

@poiley poiley commented Aug 20, 2025

Changes

  • Replace HOMEBREW_TAP_TOKEN with built-in GITHUB_TOKEN in release workflow
  • Removes need for custom Personal Access Token secret
  • More secure and compliant with organizational security practices
  • Works because both repositories are in the same organization (actual-software)

Benefits

Security: Uses GitHub's built-in token instead of custom PAT
Compliance: No need to manage additional secrets
Maintenance: One less token to rotate/manage

Testing

The automation will be tested on the next version release. The homebrew tap repository is already configured to handle the repository dispatch events from this workflow.

Related

@poiley poiley requested a review from etbyrd August 20, 2025 22:54
@poiley poiley changed the title Use GITHUB_TOKEN for homebrew tap automation instead of PAT ci: Use GITHUB_TOKEN for homebrew tap automation instead of PAT Aug 21, 2025
- Removes need for custom PAT secret
- Uses built-in GITHUB_TOKEN which works for same-org repos
- More secure and compliant approach
@poiley poiley force-pushed the homebrew-automation-security-fix branch from 84344e4 to ab32e43 Compare September 3, 2025 01:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant