Regarding https://nfcore.slack.com/archives/CE6P95170/p1784904402855599?thread_ts=1784904402.855599&cid=CE6P95170 My main point was that a GitHub app hands out an installation token that by default is valid for one hour and scoped to the repository you request it for. Whereas a personal access token is valid until it expires or you remove it. This gives malicious actors much more time to exploit it. Within workflows you can also request the default GitHub token with different kinds of permissions. I'd have to study what the bot is supposed to do, to make more specific recommendations. I also have an agent skill for a security conscious review of GH workflows. I'll dig that up when I'm not on the phone.

Nice, thanks @moritz!