Our CI workflows need to clone private submodules/dependencies from other bluesky-social repos. We're currently using PATs that keep expiring. A GitHub App mints short-lived tokens automatically.
- Go to https://github.com/organizations/bluesky-social/settings/apps/new
- Name:
bluesky-ci-repo-access - Homepage URL:
https://github.com/bluesky-social - Webhooks: uncheck "Active"