Github Packages(npm) Installation with Github App Tokens

[hariprasadpo28]

Select Topic Area

Question

Body

We use npm packages on github packages, we need to install these packages on our CI builds where authentication is required. Since we were moving away with Github PATs (a security concern), we tried installing packages with Github App tokens (installation token) but facing error These authorization settings were found:.
There is no option to enable packages scope in fine grained tokens as well.
So there is no way to install packages without a PAT(classic) token ?

[d-suter]

You need classic PATs for installing packages from GitHub Packages, as fine-grained tokens don’t support this. For better security, use GitHub Actions with a service account.

[hariprasadpo28]

That's where I am coming from.. even for service account PAT needs to be created right.. so I was thinking if installation can be possible with Github apps where token is short-lived

[d-suter]

You're right, even for a service account, you'd need a PAT. Unfortunately, GitHub App tokens can't handle package installations. So, for now, the classic PAT is your best bet.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬