From 0660f0bf4e72e8469a467487d7488d3b7229e527 Mon Sep 17 00:00:00 2001 From: Darien Hernandez Date: Wed, 29 Apr 2026 09:22:51 +0200 Subject: [PATCH] ci: read app client-id from vars and drop redundant owner Matches the genlayer-node release workflow pattern: Client ID is a repository variable (not a secret), and owner is omitted since the action defaults to the current repo's owner. --- .github/workflows/README.md | 6 +++--- .github/workflows/sync-docs-from-node.yml | 6 ++---- 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/.github/workflows/README.md b/.github/workflows/README.md index e2b409d8..7b92ce49 100644 --- a/.github/workflows/README.md +++ b/.github/workflows/README.md @@ -71,10 +71,10 @@ Add this to a workflow in the genlayer-node repository: Access to the private `genlayerlabs/genlayer-node` repository is provided by a GitHub App installed on that repository. The workflow mints a short-lived installation token via `actions/create-github-app-token@v3`. -Required repository secrets: +Required configuration: -- `NODE_SYNC_APP_CLIENT_ID`: Client ID of the GitHub App -- `NODE_SYNC_APP_KEY`: PEM-encoded private key of the GitHub App +- `NODE_SYNC_APP_CLIENT_ID` (repository variable): Client ID of the GitHub App +- `NODE_SYNC_APP_KEY` (repository secret): PEM-encoded private key of the GitHub App The App must be installed on `genlayerlabs/genlayer-node` with at least `Contents: Read` permission. Tokens are scoped to that single repository at mint time. diff --git a/.github/workflows/sync-docs-from-node.yml b/.github/workflows/sync-docs-from-node.yml index ea80ab1c..63c59056 100644 --- a/.github/workflows/sync-docs-from-node.yml +++ b/.github/workflows/sync-docs-from-node.yml @@ -69,9 +69,8 @@ jobs: if: steps.extract.outputs.version == 'latest' uses: actions/create-github-app-token@v3 with: - client-id: ${{ secrets.NODE_SYNC_APP_CLIENT_ID }} + client-id: ${{ vars.NODE_SYNC_APP_CLIENT_ID }} private-key: ${{ secrets.NODE_SYNC_APP_KEY }} - owner: genlayerlabs repositories: genlayer-node - name: Detect latest version @@ -120,9 +119,8 @@ jobs: id: app-token uses: actions/create-github-app-token@v3 with: - client-id: ${{ secrets.NODE_SYNC_APP_CLIENT_ID }} + client-id: ${{ vars.NODE_SYNC_APP_CLIENT_ID }} private-key: ${{ secrets.NODE_SYNC_APP_KEY }} - owner: genlayerlabs repositories: genlayer-node - name: Clone source repository