This message was deleted.

yes it works with that too

So, in this case I need to send the client secret on the gh-app-key variable?

I think the app needs to be authenticated withe the PEM file but you can also use the client token in tha same way like a webhook, but I don't think you can setup a github app without a PEM key.