You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Jun 17, 2026. It is now read-only.
Next steps: Take a moment to review the security alert above. Review
the linked package source code to understand the potential risk. Ensure the
package is not malicious before proceeding. If you're unsure how to proceed,
reach out to your security team or ask the Socket team for help at
support@socket.dev.
Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.
Mark the package as acceptable risk. To ignore this alert only
in this pull request, reply with the comment
@SocketSecurity ignore github/actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349. You can
also ignore all packages with @SocketSecurity ignore-all.
To ignore an alert for all future pull requests, use Socket's Dashboard to
change the triage state of this alert.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1→v2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
actions/create-github-app-token (actions/create-github-app-token)
v2.2.2Compare Source
Bug Fixes
v2.2.1Compare Source
Bug Fixes
v2.2.0Compare Source
Bug Fixes
Features
v2.1.4Compare Source
Bug Fixes
v2.1.3Compare Source
Bug Fixes
v2.1.2Compare Source
Bug Fixes
v2.1.1Compare Source
Bug Fixes
node24as runner" (#278) (5204204), closes actions/create-github-app-token#267v2.1.0Compare Source
Features
node24as runner (#267) (a1cbe0f)v2.0.6Compare Source
Bug Fixes
-with_(#246) (3336784)v2.0.5Compare Source
Bug Fixes
v2.0.4Compare Source
Bug Fixes
v2.0.3Compare Source
Bug Fixes
v2in examples (#234) (9ba274d), closes #232core.getBooleanInput()to retrieve boolean input values (#223) (c3c17c7)v2.0.2Compare Source
Bug Fixes
v2.0.1Compare Source
Bug Fixes
v2.0.0Compare Source
BREAKING CHANGES
app_id,private_key,skip_token_revoke) and madeapp-idandprivate-keyrequired in the action configuration.v2Compare Source
v1.12.0Compare Source
Features
v1.11.7Compare Source
Bug Fixes
v1.11.6Compare Source
Bug Fixes
v1.11.5Compare Source
Bug Fixes
v1.11.4Compare Source
Bug Fixes
v1.11.3Compare Source
Bug Fixes
v1.11.2Compare Source
Bug Fixes
v1.11.1Compare Source
What's Changed
Bug Fixes
Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1
v1.11.0Compare Source
What's Changed
Features
New Contributors
Full Changelog: actions/create-github-app-token@v1.10.4...v1.11.0
v1.10.4Compare Source
What's Changed
git committer stringandConfigure git CLIexamples by @maboloshi in #151Bug Fixes
New Contributors
Full Changelog: actions/create-github-app-token@v1.10.3...v1.10.4
v1.10.3Compare Source
What's Changed
Bug Fixes
New Contributors
Full Changelog: actions/create-github-app-token@v1.10.2...v1.10.3
v1.10.2Compare Source
Bug Fixes
v1.10.1Compare Source
Bug Fixes
v1.10.0Compare Source
Features
private-key: escaped newlines will be replaced (#132) (9d23fb9)v1.9.3Compare Source
Bug Fixes
v1.9.2Compare Source
Bug Fixes
v1.9.1Compare Source
Bug Fixes
ownerinput description (#118) (d9bc169)v1.9.0Compare Source
Features
app-slugandinstallation-id(#105) (babaff4)v1.8.2Compare Source
Bug Fixes
v1.8.1Compare Source
Bug Fixes
v1.8.0Compare Source
Features
v1.7.0Compare Source
Features
github-api-url(#88) (837e275), closes #77v1.6.4Compare Source
Bug Fixes
v1.6.3Compare Source
Bug Fixes
v1.6.2Compare Source
Bug Fixes
v1.6.1Compare Source
Bug Fixes
v1.6.0Compare Source
Features
v1.5.1Compare Source
Bug Fixes
v1.5.0Compare Source
Features
v1.4.0Compare Source
Features
skip_token_revokeinput for configuring token revocation (#54) (9ec88c4), closes 1#L46-L47 1#L132v1.3.0Compare Source
Features
v1.2.2Compare Source
Bug Fixes
v1.2.1Compare Source
Bug Fixes
GITHUB_API_URLwhen creating installation access token (#38) (c08c5ac), closes #36v1.2.0Compare Source
Features
v1.1.5Compare Source
Bug Fixes
package.json(#35) (1dccc4c), closes #34v1.1.4Compare Source
Bug Fixes
dist/before release (#33) (9a6a017), closes #31v1.1.3Compare Source
Bug Fixes
v1.1.2Compare Source
Bug Fixes
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate using a curated preset maintained by