From 08c32e0430ecd8ad87366aa8580a76f30a834357 Mon Sep 17 00:00:00 2001 From: rocklambros Date: Thu, 17 Sep 2026 16:38:44 -0600 Subject: [PATCH] Identify the board App by client-id, which app-id is deprecated in favour of The first live run of the workflow succeeded and annotated itself twice: Input 'app-id' has been deprecated with message: Use 'client-id' instead. Both values identify the same App and neither is a secret, so this is a rename rather than a change of trust. BOARD_APP_CLIENT_ID is set on the board-automation environment alongside the App ID, which stays in place so a rollback needs no settings change. Left alone on purpose: the annotation is currently a warning and the run it appeared on completed green. Fixing it now costs one line and avoids finding out mid-outage which release turns the warning into a failure. Signed-off-by: Rock Lambros --- .github/workflows/board-reconcile.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/board-reconcile.yml b/.github/workflows/board-reconcile.yml index a9bd0f3..1fe2434 100644 --- a/.github/workflows/board-reconcile.yml +++ b/.github/workflows/board-reconcile.yml @@ -90,7 +90,10 @@ jobs: id: token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: - app-id: ${{ vars.BOARD_APP_ID }} + # client-id, not app-id: create-github-app-token deprecated app-id and + # annotates every run that uses it. Both identify the same App and neither is + # a secret, so this is a rename rather than a change of trust. + client-id: ${{ vars.BOARD_APP_CLIENT_ID }} private-key: ${{ secrets.BOARD_APP_PRIVATE_KEY }} # Without an owner the token is scoped to this repository alone and cannot # reach an organization-owned project. The App is installed with