From 4df1ce773e729701580aa9154e5ba743c6e3ce18 Mon Sep 17 00:00:00 2001
From: Zac Farrell <zac@hotdata.dev>
Date: Fri, 13 Mar 2026 09:12:34 -0700
Subject: [PATCH] fix: use GitHub App token for cross-repo checkout

---
 .github/workflows/claude-pr-review.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/claude-pr-review.yml b/.github/workflows/claude-pr-review.yml
index 564b22c..c75ccb5 100644
--- a/.github/workflows/claude-pr-review.yml
+++ b/.github/workflows/claude-pr-review.yml
@@ -18,9 +18,18 @@ jobs:
         with:
           fetch-depth: 1
 
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: 3060111
+          private-key: ${{ secrets.HOTDATA_AUTOMATION_PRIVATE_KEY }}
+          owner: hotdata-dev
+
       - uses: actions/checkout@v4
         with:
           repository: hotdata-dev/github-workflows
+          token: ${{ steps.app-token.outputs.token }}
           path: .github-workflows
           sparse-checkout: docs/claude-pr-review-prompt.md
           sparse-checkout-cone-mode: false