DashboardcraftUse release-bot token for cross-repo AP…

Use release-bot token for cross-repo API calls in getsentry org workflows

Category: pattern
Confidence: 1.00
ID: 019daf66-5dc3-7a5c-b169-be468d2ff29c
Project ID: e16af391-c497-4837-b681-c849a5514499
Cross-project: No
Recalled in other projects: 1
Source session: (none)
Created: 2026-07-28 10:15:42
Updated: 2026-07-28 10:15:42

Cross-Project Recalls

ProjectHitsLast recalled
cli 5 6d ago

Content

The sentry-internal-app is NOT installed on all getsentry repos (e.g. sentry-xbox, sentry-playstation, sentry-switch, service-registry). Using its token for cross-repo API calls like gh api repos/{other-repo}/commits/... returns 404 "Not Found" — looks like a missing resource but is actually a missing installation. Use sentry-release-bot instead: configure with client-id: ${{ vars.SENTRY_RELEASE_BOT_CLIENT_ID }}, private-key: ${{ secrets.SENTRY_RELEASE_BOT_PRIVATE_KEY }}, and owner: getsentry to get a token with access to all org repos. Pattern in getsentry/publish CI poller: generate both tokens, use internal-app for publish-repo label changes, release-bot for cross-repo repos/{repo}/commits/{sha}/status and /check-runs API calls.

Move to: