[all-commits] [llvm/llvm-project] fbf5ba: workflows/commit-access-review: Use a GitHub App a...

[Tom Stellard via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: fbf5bac1079be628111e8a3f1747d66b227017ca
      https://github.com/llvm/llvm-project/commit/fbf5bac1079be628111e8a3f1747d66b227017ca
  Author: Tom Stellard <tstellar at redhat.com>
  Date:   2026-02-13 (Fri, 13 Feb 2026)

  Changed paths:
    M .github/workflows/commit-access-review.yml

  Log Message:
  -----------
  workflows/commit-access-review: Use a GitHub App access token instead of llvmbot (#179364)

This replaces the use of an access token associated with the llvmbot
account with one that is generated by a GitHub App. This is slightly
better, because it eliminates the need to periodically rotate the
llvmbot tokens, which is difficult to do, since it requires sharing a
password and 2fa code among all the admins.

The tokens generated by the app automatically expire after an hour, and
the private key that is used to request it can be easily rotated by an
LLVM Organization owner. Also, since a single private key can be used to
generate many tokens, there is only one secret to rotate instead of
many.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications