···27 steps:
28 # Use a GitHub App to create the PR so that CI gets triggered
29 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
30- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
31 id: app-token
32 with:
33 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
···27 steps:
28 # Use a GitHub App to create the PR so that CI gets triggered
29 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
30+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
31 id: app-token
32 with:
33 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
···36 # Use a GitHub App to create the PR so that CI gets triggered
37 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
38 # We only need Pull Requests: write here, but the app is also used for backports.
39- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
40 id: app-token
41 with:
42 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
···36 # Use a GitHub App to create the PR so that CI gets triggered
37 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
38 # We only need Pull Requests: write here, but the app is also used for backports.
39+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
40 id: app-token
41 with:
42 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
+1-1
.github/workflows/labels.yml
···49 run: npm install @actions/artifact bottleneck
5051 # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour.
52- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
53 if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID
54 id: app-token
55 with:
···49 run: npm install @actions/artifact bottleneck
5051 # Use a GitHub App, because it has much higher rate limits: 12,500 instead of 5,000 req / hour.
52+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
53 if: github.event_name != 'pull_request' && vars.NIXPKGS_CI_APP_ID
54 id: app-token
55 with:
+1-1
.github/workflows/periodic-merge.yml
···23 steps:
24 # Use a GitHub App to create the PR so that CI gets triggered
25 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
26- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
27 id: app-token
28 with:
29 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
···23 steps:
24 # Use a GitHub App to create the PR so that CI gets triggered
25 # The App is scoped to Repository > Contents and Pull Requests: write for Nixpkgs
26+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
27 id: app-token
28 with:
29 app-id: ${{ vars.NIXPKGS_CI_APP_ID }}
+1-1
.github/workflows/reviewers.yml
···48 # - OWNER_APP_PRIVATE_KEY (secret)
49 #
50 # Can't use the token received from permissions above, because it can't get enough permissions.
51- - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
52 if: github.event_name == 'pull_request_target' && vars.OWNER_APP_ID
53 id: app-token
54 with:
···48 # - OWNER_APP_PRIVATE_KEY (secret)
49 #
50 # Can't use the token received from permissions above, because it can't get enough permissions.
51+ - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
52 if: github.event_name == 'pull_request_target' && vars.OWNER_APP_ID
53 id: app-token
54 with: