Short-lived, repository-scoped tokens for workflows that create branches and pull requests.
by tiangoloPython
Last 12 weeks · 26 commits
4 of 6 standards met
Summary allow the release preparation workflow to request PR Submit tokens replace the long-lived with a repository-scoped installation token obtained through GitHub OIDC attribute generated release commits to Security The workflow keeps and adds only to request the OIDC identity token. PR Submit validates the allowlisted workflow from the default branch before returning its short-lived repository installation token. Checks AI Disclaimer This PR was created with the help of gpt-5.6-sol and reviewed by hand.
Repository: tiangolo/pr-submit. Description: Short-lived, repository-scoped tokens for workflows that create branches and pull requests. Stars: 1, Forks: 0. Primary language: Python. Languages: Python (99.3%), Dockerfile (0.7%). License: MIT. Topics: automation, github-actions, github-app, oidc, pull-requests, release-automation. Latest release: 0.0.1 (1w ago). Open PRs: 1, open issues: 0. Last activity: 1w ago. Community health: 85%. Top contributors: tiangolo, latest-changes[bot].