Permission-based access to access maven reposiotry

[pawel-jedruch-swiftpay]

Select Topic Area

Question

Body

I would like to use the create-github-app-token to set-up a ci/cd without personal classic access token. Currently it looks like the Github Maven Repository doesn't support the permission-based access, so I'm cannot follow the flow from: actions/create-github-app-token@v1.

Example of the flow that isn't working for me, can be find here: actions/create-github-app-token#130

Is there a way to authorize with maven repository using the permission-based access token ? Without this, we have to stick to using the personal access token for shared CI/CD configurations across whole organization.

[OliverMeyerDSA]

We looked into this for some days and came to the conclusion that it is ONLY possible using personal access tokens (classic) :(
The documentation says:
To authenticate to a GitHub Packages registry within a GitHub Actions workflow, you can use [..] a personal access token (classic) with at least read:packages scope to install packages associated with other private repositories

We tried a lot to read from the maven repository of another private repository in other ways in failed in multiple ways.

[pawel-jedruch-swiftpay]

We reached the same conclusion. I had hoped that by asking the question, I might gain some insights into when (or if) access to the Maven repository will support the new permission tokens from GitHub.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬