Future: fully automate scoped token / GitHub App credential provisioning during repo bootstrap
@jdfalk is already working on this.
Since Apr 25, 2026.
Assessment
This issue has not been assessed yet.
Description
Tracked from bootstrap-repo skill design discussion (2026-04-24).
Context
The new bootstrap-repo skill (see .claude/skills/bootstrap-repo/) creates and configures repos to ghcommon standards but stops short of provisioning the secrets the release workflow needs (CI_APP_ID, CI_APP_PRIVATE_KEY, etc). Today it prints a manual checklist directing the user to setup-ci-app.sh.
Desired end state
Single-command bootstrap that ends with a fully-functional release workflow on first push:
- Skill creates or attaches a scoped GitHub App with the minimum permissions needed by the workflows in the chosen flavor (action / library / service).
- Generates and installs the App's private key as a repo secret.
- Records App installation IDs where workflows expect them.
- Idempotent: re-running on an already-bootstrapped repo is a no-op.
Why deferred
Secret provisioning has higher blast radius than the rest of bootstrap and benefits from settling the skill's other surface area first. Doing it manually via setup-ci-app.sh is acceptable for now.
Acceptance
bootstrap_repo.sh --with-secrets(or equivalent) succeeds end-to-end on a fresh repo with no manual steps after.- Documented in
docs/standards/under each flavor's "secrets" section.
- Dominant language
- Python
- Stars
- 2
- Forks
- 0
- Avg merge
- 18h 8m
- Merged PRs (30d)
- 14
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from falkcorp/github-common
-
Add SECURITY.md file Opendocumentation enhancement module:database module:ui priority:medium security
Difficulty 1/5 1-3 hours Newbie friendliness 72/100
falkcorp/github-common#81 ·
-
documentation module:ui priority:medium security
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
falkcorp/github-common#78 ·
-
enhancement needs-triage priority:medium
falkcorp/github-common#150 · 1 reaction · 1 assignee ·
-
enhancement module:queue module:ui priority:medium tech:protobuf
Difficulty 3/5 1-2 days Newbie friendliness 35/100
falkcorp/github-common#99 ·
-
automation bug github-actions module:ui priority:medium test workflow
Difficulty 1/5 Under an hour Newbie friendliness 20/100
falkcorp/github-common#96 ·
All issues in falkcorp/github-common
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100