{"repo":"konippi/create-github-app-token-aws-kms","free":true,"listed":false,"github":"https://github.com/konippi/create-github-app-token-aws-kms","clone":"git clone https://github.com/konippi/create-github-app-token-aws-kms.git","description":"GitHub Action for creating a GitHub App installation access token using AWS KMS for JWT signing.","language":"TypeScript","stars":17,"topics":["aws","github-actions","typescript","kms","oidc"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"Create GitHub App Token (AWS KMS) GitHub Action for creating a GitHub App installation access token using AWS KMS for JWT signing. Once imported into KMS, the private key never leaves the HSM boundary at runtime — JWT signing is delegated to the KMS Sign API, eliminating the need to store private keys in GitHub Secrets. This follows GitHub's official recommendation to store private keys in a key management service and use runtime signing. How it works Usage [!IMPORTANT] This action requires at least one permission- input . Unlike actions/create-github-app-token , permissions are not optional — this enforces least-privilege by design. Basic usage (current repository) Token for specific repositories Token for all repositories in an organization Inputs Input Required Description ------- ---------- ------------- app-id Yes GitHub App ID kms-key-id Yes AWS KMS key ID, key ARN, alias name ( alias/... ), or alias ARN owner No GitHub App installation owner. Defaults to current repository owner repositories No Comma or newline-separated list of repositories. Defaults to current repository permission- At least one Permission scoping (e.g., permission-contents: read ). See Permissions skip-token-revoke No If true , the token will not be revoked when the job completes. Default: false github-api-url No GitHub REST API URL. Default: ${{ github.api url }} Permissions At least one permission- input must be set. Available permissions: permission-actions , permission-administration , permissio","default_branch":null,"files":null,"tree":[],"storefront":"/r/konippi","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/konippi/create-github-app-token-aws-kms/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}