From 92118830381fb10d11843281269b73ced0fe3412 Mon Sep 17 00:00:00 2001 From: Vijay Sudharshan Date: Thu, 9 Apr 2026 13:19:45 -0400 Subject: [PATCH] fix: revert provenance auth to PLUGIN_PUBLISH_TOKEN MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit PR #23 switched from PLUGIN_PUBLISH_TOKEN PAT to GitHub App token (CARTA_CI_APP_ID/CARTA_CI_APP_PRIVATE_KEY), but those secrets were never configured on this repo. Revert to the PAT which is already available as a repository secret. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- .github/workflows/provenance-check.yml | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/.github/workflows/provenance-check.yml b/.github/workflows/provenance-check.yml index 7e4639a..4a0bb3a 100644 --- a/.github/workflows/provenance-check.yml +++ b/.github/workflows/provenance-check.yml @@ -13,12 +13,6 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - - uses: actions/create-github-app-token@v1 - id: app-token - with: - app-id: ${{ secrets.CARTA_CI_APP_ID }} - private-key: ${{ secrets.CARTA_CI_APP_PRIVATE_KEY }} - repositories: claude-marketplace - name: Identify changed plugins id: changes run: | @@ -39,7 +33,7 @@ jobs: if: steps.changes.outputs.changed_plugins != '' run: python .github/scripts/verify-provenance.py "$CHANGED_PLUGINS" env: - GH_TOKEN: ${{ steps.app-token.outputs.token }} + GH_TOKEN: ${{ secrets.PLUGIN_PUBLISH_TOKEN || github.token }} PROVENANCE_REPO: ${{ vars.PROVENANCE_REPO }} CHANGED_PLUGINS: ${{ steps.changes.outputs.changed_plugins }} - name: Post failure comment