KofTwentyTwo/ci-workflows
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

windows, macos: release with the job token #12

Merged
james.maes merged 1 commits from release-job-token into main 2026-11-08 23:20:19 +00:00
Conversation 0 Commits 1 Files Changed 3
+6 -9
james.maes commented 2026-11-08 23:19:55 +00:00
Owner
Copy link
Copy source

go.yaml and gradle.yaml already use the job token for releases because the org PACKAGES_TOKEN got HTTP 403 on the release lookup. windows.yaml and macos.yaml still used secrets.PACKAGES_TOKEN || github.token.

  • Release step TOKEN: ${{ github.token }} (same pattern and comment as go.yaml), contents: write already declared.
  • Drop the now-unused PACKAGES_TOKEN secret input (callers with secrets: inherit are unaffected).
  • README: release note updated.

Proof: KofTwentyTwo/ci-qualification branch proof/release-job-token, tag v0.0.0-proof-jobtoken.1, Windows (kof-windows-amd64) and macOS (kof-macos-arm64) callers create the prerelease and attach assets plus per-platform checksums with the job token.

🤖 Generated with Claude Code

`go.yaml` and `gradle.yaml` already use the job token for releases because the org `PACKAGES_TOKEN` got HTTP 403 on the release lookup. `windows.yaml` and `macos.yaml` still used `secrets.PACKAGES_TOKEN || github.token`. - Release step `TOKEN: ${{ github.token }}` (same pattern and comment as `go.yaml`), `contents: write` already declared. - Drop the now-unused `PACKAGES_TOKEN` secret input (callers with `secrets: inherit` are unaffected). - README: release note updated. Proof: `KofTwentyTwo/ci-qualification` branch `proof/release-job-token`, tag `v0.0.0-proof-jobtoken.1`, Windows (`kof-windows-amd64`) and macOS (`kof-macos-arm64`) callers create the prerelease and attach assets plus per-platform checksums with the job token. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
james.maes added 1 commit 2026-11-08 23:19:55 +00:00
windows, macos: release with the job token 27192881a6 
The org PACKAGES_TOKEN got HTTP 403 on the release lookup; go.yaml and
gradle.yaml already use the job token (contents: write). Do the same here
and drop the now-unused PACKAGES_TOKEN secret input.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
james.maes merged commit 88d92df64e into main 2026-11-08 23:20:19 +00:00
james.maes deleted branch release-job-token 2026-11-08 23:20:20 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/ci-workflows#12