🚀 Github Actions: Use Github App to make the requests.

[AllWKA]

Workspace

github-actions

🔖 Feature description

Add support for configuring a GitHub App in order to make authenticated requests to the GitHub API.

🎤 Context

I'm trying to avoid multiple authentication methods. I already have a GitHub App configured with the necessary repository permissions, so the goal is to use this GitHub App to manage GitHub Actions as well.

✌️ Possible Implementation

• Add or create a configuration in app-config.yaml similar to the existing GitHub integration: Including in Integrations Config

• Use the createAppAuth authentication strategy for the Octokit instance: createAppAuth(options)

👀 Have you spent some time to check if this feature request has been raised before?

• I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

• I have read the Code of Conduct

Are you willing to submit PR?

None

[Parsifal-M]

Heya @AllWKA

Have you been following the docs on how to set this up? We discussed this in the SIG today and where wondering if there where possibly some gaps in the integration for this

[AllWKA]

Hi @Parsifal-M,

Sorry for the late response. I have personally used this strategy to create my own Octokit instance authenticated as a GitHub App installation, and it works well. However, there are some important limitations to be aware of:

• The GitHub App only has access to repositories and resources it has been explicitly installed on and granted permissions for.
• Some API endpoints are not accessible with a GitHub App installation token; certain actions require user authentication and cannot be performed by the App alone.
• All actions performed are attributed to the GitHub App, not to a specific user, which affects visibility and audit trails.
• Rate limits for GitHub Apps differ from those for personal access tokens, typically allowing a fixed number of requests per hour per installation.