From 2321b0c7afdd52120327357554ff044c499efa28 Mon Sep 17 00:00:00 2001
From: "T.J. Gohl" <tjgohl@ciq.com>
Date: Fri, 5 Dec 2025 12:57:31 -0500
Subject: [PATCH] Fix GitHub App token scope for internal repository access
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The workflow was failing because the GitHub App token generated by
actions/create-github-app-token@v1 was only scoped to the current
repository (kernel-src-tree) by default. When it tried to checkout
kernel-container-build (which has INTERNAL visibility), the token
didn't have access, resulting in "Repository not found" errors.

Added explicit repositories parameter to all token generation steps
to grant access to all required repositories:
- kernel-tools
- kernel-src-tree
- kernel-src-tree-tools
- kernel-container-build

This fix applies to all 5 token generation steps in the workflow:
- build job
- boot job
- test-kselftest job
- compare-results job
- create-pr job

Fixes: https://github.com/ctrliq/kernel-src-tree/actions/runs/19970287958

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .../kernel-build-and-test-x86_64.yml          | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/.github/workflows/kernel-build-and-test-x86_64.yml b/.github/workflows/kernel-build-and-test-x86_64.yml
index 9f89e99f459fb..59534973b20a0 100644
--- a/.github/workflows/kernel-build-and-test-x86_64.yml
+++ b/.github/workflows/kernel-build-and-test-x86_64.yml
@@ -27,6 +27,11 @@ jobs:
       with:
         app-id: ${{ secrets.APP_ID }}
         private-key: ${{ secrets.APP_PRIVATE_KEY }}
+        repositories: |
+          kernel-tools
+          kernel-src-tree
+          kernel-src-tree-tools
+          kernel-container-build
 
     - name: Checkout kernel source
       uses: actions/checkout@v4
@@ -110,6 +115,11 @@ jobs:
       with:
         app-id: ${{ secrets.APP_ID }}
         private-key: ${{ secrets.APP_PRIVATE_KEY }}
+        repositories: |
+          kernel-tools
+          kernel-src-tree
+          kernel-src-tree-tools
+          kernel-container-build
 
     - name: Checkout kernel-container-build (test branch)
       uses: actions/checkout@v4
@@ -171,6 +181,11 @@ jobs:
       with:
         app-id: ${{ secrets.APP_ID }}
         private-key: ${{ secrets.APP_PRIVATE_KEY }}
+        repositories: |
+          kernel-tools
+          kernel-src-tree
+          kernel-src-tree-tools
+          kernel-container-build
 
     - name: Checkout kernel-container-build (test branch)
       uses: actions/checkout@v4
@@ -258,6 +273,11 @@ jobs:
       with:
         app-id: ${{ secrets.APP_ID }}
         private-key: ${{ secrets.APP_PRIVATE_KEY }}
+        repositories: |
+          kernel-tools
+          kernel-src-tree
+          kernel-src-tree-tools
+          kernel-container-build
 
     - name: Determine base branch for comparison
       id: base_branch
@@ -526,6 +546,11 @@ jobs:
       with:
         app-id: ${{ secrets.APP_ID }}
         private-key: ${{ secrets.APP_PRIVATE_KEY }}
+        repositories: |
+          kernel-tools
+          kernel-src-tree
+          kernel-src-tree-tools
+          kernel-container-build
 
     - name: Create Pull Request
       env: