mirror of
https://github.com/Z3Prover/z3
synced 2026-08-08 06:52:26 +00:00
b8c098f001
The nightly release failed because the default `GITHUB_TOKEN` is a GitHub Actions App installation token without permission to create a tag that includes workflow changes. - Mint a short-lived installation token for `z3prover-ci-bot`. - Request only `contents: write` and `workflows: write`. - Use the App token for checkout credentials, tag deletion/push, and release deletion/creation. - Do not use `GH_AW_GITHUB_TOKEN`, a PAT, or another classic token. Repository setup: - `Z3_CI_APP_CLIENT_ID` is configured on `Z3Prover/z3`. - Add `Z3_CI_APP_PRIVATE_KEY` as an Actions repository secret. - Grant `z3prover-ci-bot` **Workflows: Read and write**, then approve the updated installation permissions for the Z3Prover organization. --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: NikolajBjorner <3085284+NikolajBjorner@users.noreply.github.com> Co-authored-by: Lev Nachmanson <levnach@hotmail.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| actions | ||
| agents | ||
| aw | ||
| prompts | ||
| scripts | ||
| skills | ||
| workflows | ||
| CI_MIGRATION.md | ||
| CI_TESTING.md | ||
| copilot-instructions.md | ||
| dependabot.yml | ||
| mcp.json | ||