coder

mirror of https://github.com/coder/coder.git synced 2026-10-31 02:43:21 +08:00

Files

T

Jakub Domeracki be9f8592eb ci: use dedicated release App token to publish releases (#28553 )

## Problem

The `Publish release` step fails with `HTTP 403: Resource not accessible
by integration` because the default `GITHUB_TOKEN` cannot create the
release tag under the active tag-create protection ruleset.

## Change

Use a dedicated GitHub App token for the `Publish release` step:

- Add a `Generate release App token` step using `secrets.RELEASE_APP_ID`
/ `secrets.RELEASE_APP_PRIVATE_KEY`.
- Switch only that step's `GITHUB_TOKEN` to the minted App token.

## Required before merge (admin)

1. Create the release GitHub App (least privilege) and install it on
`coder/coder`.
2. Configure `RELEASE_APP_ID` / `RELEASE_APP_PRIVATE_KEY`.
3. Add the App to the tag-create protection ruleset bypass list.

Refs coder/security-automation#297.

2026-08-25 16:32:01 +02:00

actions

ci(.github): remove the go-cache action (#27250 )

2026-07-15 18:35:18 +10:00

ISSUE_TEMPLATE

chore: remove needs-triage label from bug template (#22679 )

2026-03-06 10:55:20 +00:00

pr-deployments

chore: update deprecated usage of coder_workspace.owner* fields (#13390 )

2024-05-30 11:31:51 +01:00

scripts

ci: add retry logic for Go module operations (#21609 )