awinogradov/My App Token
Exchange a GitHub Actions OIDC token for a GitHub App installation token.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| exchange-url | Full URL of the token-exchange server's POST /github-app-token-exchange endpoint, e.g. https://exchange.example.com/github-app-token-exchange. Must be https:// (http://localhost is allowed for local testing). | yes | — |
| audience | The OIDC audience to request via core.getIDToken(). Must match the audience the exchange server validates, otherwise the exchange is rejected. | yes | — |
| permissions | Optional multi-line YAML mapping of permission name to "read" or "write", one per line, e.g.: contents: write issues: write Sent to the exchange server as a JSON object. If omitted, no permissions field is sent and the server's default scope applies. | no | — |
| timeout-ms | Timeout in milliseconds for the HTTP request to the exchange server. | no | 10000 |
Outputs
| name | description |
|---|---|
| token | The minted GitHub App installation token (masked in logs). |
| expires-at | ISO 8601 expiry timestamp of the token. |