Refactor Docker CI image workflow to enhance security by replacing GitHub App token generation with GITHUB_TOKEN for authentication during Docker image pushes.

2026-07-27 21:08:00 +00:00 · 2026-04-06 15:55:05 -07:00
parent 5affb1e75f
commit c5acfa90e0
1 changed files with 1 additions and 8 deletions
@@ -19,13 +19,6 @@ jobs:
    runs-on: ubuntu-latest
    environment: Production
    steps:
-      - name: Generate GitHub App token
-        id: app-token
-        uses: tibdex/github-app-token@v1
-        with:
-          app_id: ${{ secrets.XGITHUB_APP_ID }}
-          private_key: ${{ secrets.XGITHUB_APP_PRIVATE_KEY }}
-
      - name: Checkout code
        uses: actions/checkout@v4

@@ -34,7 +27,7 @@ jobs:
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
-          password: ${{ steps.app-token.outputs.token }}
+          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v6