Migrate to official actions/create-github-app-token action

[Copilot]

Replaces community-maintained peter-murray/workflow-application-token-action with GitHub's official actions/create-github-app-token@v2.

Changes

• Workflows: Updated .github/workflows/build.yml and .github/workflows/self-test.yml

  • Pinned to commit SHA 29824e69f54612133e76f7eaac726eef6c875baf (v2 tag)
  • Updated input parameters: application_id → app-id, application_private_key → private-key
  • Token output reference unchanged (steps.*.outputs.token)

• Documentation: Updated README.md example to reflect new action syntax

Before/After

# Before
- uses: peter-murray/workflow-application-token-action@86d05551fa394b4b813e0deee328005b45cf5237
  with:
    application_id: ${{ secrets.ADVANCED_SECURITY_APP_ID }}
    application_private_key: ${{ secrets.ADVANCED_SECURITY_APP_KEY }}

# After
- uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2
  with:
    app-id: ${{ secrets.ADVANCED_SECURITY_APP_ID }}
    private-key: ${{ secrets.ADVANCED_SECURITY_APP_KEY }}

Original prompt

Problem Statement

Replace all usages of peter-murray/workflow-application-token-action with the official GitHub-owned action actions/create-github-app-token.

Background

The peter-murray/workflow-application-token-action is a community action that generates scoped, short-lived tokens for Actions workflows using a GitHub Application. GitHub now provides an official action actions/create-github-app-token that serves the same purpose and is maintained by GitHub.

Changes Required

1. Find all workflow files that use peter-murray/workflow-application-token-action
2. Replace the action with actions/create-github-app-token@v2
3. Update the action syntax to match the official action's interface:
   • Input parameter names (e.g., app-id, private-key)
   • Output references if any
4. Update any documentation or examples that reference the old action

Expected Migration Pattern

Before:

- name: Generate a token
  id: generate-token
  uses: peter-murray/workflow-application-token-action@v1
  with:
    application_id: ${{ vars.APP_ID }}
    application_private_key: ${{ secrets.APP_PRIVATE_KEY }}

After:

- name: Generate a token
  id: generate-token
  uses: actions/create-github-app-token@v2
  with:
    app-id: ${{ vars.APP_ID }}
    private-key: ${{ secrets.APP_PRIVATE_KEY }}

Key Differences to Account For

• Parameter names may differ slightly (check documentation in the repository)
• The output token variable should remain compatible (steps.generate-token.outputs.token)
• The official action is maintained by GitHub and follows their support and security practices

Additional Requirements

• Ensure all sample code, documentation, and README files are updated
• Test that the workflows are syntactically correct after the change
• Preserve any existing functionality and configuration options

This pull request was created from Copilot chat.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.