Update release workflow to use GitHub App Token for checkout

[Copilot]

Description

Switches release workflow from default GITHUB_TOKEN to GitHub App Token for repository checkout. Enables fine-grained permissions and follows recommended automation practices.

Changes:

• Added Generate GitHub App Token step using actions/create-github-app-token@v1
• Updated Checkout repository step to use generated token instead of secrets.GITHUB_TOKEN

Resolves #(issue)

Checklist:

• Public methods are documented
• Public methods are tested
• New and existing tests pass when run locally
• There are no new warnings or errors

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Chore]: Update release workflow to use GitHub App Token for checkout</issue_title>
<issue_description>### What

Edit .github/workflows/release.yml:

1. Add this step after line 56 (after "Determine target branch"):

- name: Generate GitHub App Token
  id: generate_token
  uses: actions/create-github-app-token@v1
  with:
    app-id: ${{ secrets.APP_ID }}
    private-key: ${{ secrets.APP_PRIVATE_KEY }}

2. Update line 63 (in "Checkout repository" step):

Replace the token: field with:

token: ${{ steps.generate_token.outputs.token }}

Why

This is necessary to ensure the release workflow uses a GitHub App Token for repository checkout, increasing security and enabling fine-grained repo access management. It fits recommended GitHub best practices for workflow automation.

Notes

Estimated time to complete: 3 minutes.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes [Chore]: Update release workflow to use GitHub App Token for checkout #369

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud