From 8311fd3f2f7f17e2445d723f94579006c87c1480 Mon Sep 17 00:00:00 2001
From: KC Berg <kc.berg@stackhawk.com>
Date: Tue, 8 Jul 2025 18:59:06 -0600
Subject: [PATCH] ci: add step to test GitHub App token permissions via API

---
 .github/workflows/ci.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6776b18..cbbdf29 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,6 +41,11 @@ jobs:
         with:
           app_id: ${{ secrets.HAWKY_APP_ID }}
           private_key: ${{ secrets.HAWKY_APP_PRIVATE_KEY }}
+      - name: Test token permissions
+        run: |
+          curl -v -H "Authorization: token ${{ steps.generate_token.outputs.token }}" \
+            https://api.github.com/repos/stackhawk/stackhawk-mcp
+        shell: bash
       - name: Set up git for pushing
         run: |
           git remote set-url origin https://x-access-token:${{ steps.generate_token.outputs.token }}@github.com/${{ github.repository }}.git