From 5bee53e76f813ffe5a8682737713a8f30db12077 Mon Sep 17 00:00:00 2001 From: Joshua Li Date: Tue, 25 Aug 2026 18:51:55 -0700 Subject: [PATCH 1/2] chore(gocd): use GitHub App credentials --- gocd/templates/pipelines/taskbroker.libsonnet | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/gocd/templates/pipelines/taskbroker.libsonnet b/gocd/templates/pipelines/taskbroker.libsonnet index 20dea663..702ac67d 100644 --- a/gocd/templates/pipelines/taskbroker.libsonnet +++ b/gocd/templates/pipelines/taskbroker.libsonnet @@ -8,7 +8,8 @@ local checks_stage = { timeout: 20, elastic_profile_id: 'taskbroker', environment_variables: { - GITHUB_TOKEN: '{{SECRET:[devinfra-github][token]}}', + GITHUB_APP_ID: '{{SECRET:[devinfra-github][app_id]}}', + GITHUB_APP_PRIVATE_KEY: '{{SECRET:[devinfra-github][private_key]}}', }, tasks: [ gocdtasks.script(importstr '../bash/check-github-runs.sh'), From fb51f35bc54c19a224ef2057ec70c78ac82af0b9 Mon Sep 17 00:00:00 2001 From: Joshua Li Date: Thu, 27 Aug 2026 10:38:59 -0700 Subject: [PATCH 2/2] use checkruns2 for GitHub App credentials --- gocd/templates/bash/check-github-runs.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gocd/templates/bash/check-github-runs.sh b/gocd/templates/bash/check-github-runs.sh index acd577ae..e8b7e754 100644 --- a/gocd/templates/bash/check-github-runs.sh +++ b/gocd/templates/bash/check-github-runs.sh @@ -1,6 +1,6 @@ #!/bin/bash -checks-githubactions-checkruns \ +checks-githubactions-checkruns2 \ "getsentry/taskbroker" \ "${GO_REVISION_TASKBROKER_REPO}" \ "Build and push production images to single-region registry" \