Stirling-PDF/.github/workflows
Ludy 45462dc5d4
Use setup-bot token for GitHub Actions and fix GH_APP_ID secret reference (#3615)
# Description of Changes

Please provide a summary of the changes, including:

- **What was changed**  
- In **`.github/workflows/check_properties.yml`**, each
`actions/github-script` step now uses the GitHub App token output (`${{
steps.setup-bot.outputs.token }}`) instead of relying on the default
`secrets.GITHUB_TOKEN`.
- In **`.github/workflows/sync_files.yml`**, the `app-id` input for the
`setup-bot` action was corrected to use `${{ secrets.GH_APP_ID }}`
instead of `${{ vars.GH_APP_ID }}`.

- **Why the change was made**  
- To ensure all workflow steps authenticate through the GitHub App with
least-privilege tokens, improving security and avoiding permission
issues with the default token or inaccessible repo variables.
- To maintain consistency across workflows by centralizing
authentication to the App’s token output.


---

## Checklist

### General

- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md)
- [ ] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md)
(if applicable)
- [ ] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md)
(if applicable)
- [ ] I have performed a self-review of my own code
- [ ] My changes generate no new warnings

### Documentation

- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/)
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags)
(for new translation tags only)

### UI Changes (if applicable)

- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)

### Testing (if applicable)

- [ ] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#6-testing)
for more details.
2025-05-31 12:23:20 +01:00
..
auto-labeler.yml Bump step-security/harden-runner from 2.11.1 to 2.12.0 (#3394) 2025-04-24 10:43:08 +01:00
build.yml Bump actions/setup-python from 5.5.0 to 5.6.0 (#3410) 2025-04-24 12:35:47 +01:00
check_properties.yml Use setup-bot token for GitHub Actions and fix GH_APP_ID secret reference (#3615) 2025-05-31 12:23:20 +01:00
codeql.yml-disabled Bump: Harden Runner from v2.10.2 to v2.10.3 (#2686) 2025-01-13 22:26:05 +00:00
dependency-review.yml Bump actions/dependency-review-action from 4.7.0 to 4.7.1 (#3543) 2025-05-20 11:51:32 +01:00
licenses-update.yml Standardize GitHub App Bot Authentication Across Workflows (#3582) 2025-05-27 12:36:41 +01:00
manage-label.yml Bump step-security/harden-runner from 2.11.1 to 2.12.0 (#3394) 2025-04-24 10:43:08 +01:00
multiOSReleases.yml Bump gradle/actions from 4.3.1 to 4.4.0 (#3544) 2025-05-20 11:51:52 +01:00
PR-Demo-cleanup.yml Bump step-security/harden-runner from 2.11.1 to 2.12.0 (#3394) 2025-04-24 10:43:08 +01:00
PR-Demo-Comment-with-react.yml Bump docker/build-push-action from 6.16.0 to 6.17.0 (#3541) 2025-05-20 11:50:59 +01:00
pre_commit.yml Standardize GitHub App Bot Authentication Across Workflows (#3582) 2025-05-27 12:36:41 +01:00
push-docker.yml Bump gradle/actions from 4.3.1 to 4.4.0 (#3544) 2025-05-20 11:51:52 +01:00
releaseArtifacts.yml Bump gradle/actions from 4.3.1 to 4.4.0 (#3544) 2025-05-20 11:51:52 +01:00
scorecards.yml Bump github/codeql-action from 3.28.17 to 3.28.18 (#3542) 2025-05-20 11:51:13 +01:00
sonarqube.yml Bump gradle/actions from 4.3.1 to 4.4.0 (#3544) 2025-05-20 11:51:52 +01:00
stale.yml Bump step-security/harden-runner from 2.11.1 to 2.12.0 (#3394) 2025-04-24 10:43:08 +01:00
swagger.yml Bump gradle/actions from 4.3.1 to 4.4.0 (#3544) 2025-05-20 11:51:52 +01:00
sync_files.yml Use setup-bot token for GitHub Actions and fix GH_APP_ID secret reference (#3615) 2025-05-31 12:23:20 +01:00
testdriver.yml Bump docker/build-push-action from 6.16.0 to 6.17.0 (#3541) 2025-05-20 11:50:59 +01:00