From f996ef372d0c323f21de598e5b2995d33b41cce6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?David=20Barrag=C3=A1n=20Merino?=
 <david.barragan@kaleidos.net>
Date: Thu, 25 Jun 2026 11:26:15 +0200
Subject: [PATCH] :wrench: Migrate auto-label workflow from PAT to GitHub App
 toke

---
 .github/workflows/auto-label.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/auto-label.yml b/.github/workflows/auto-label.yml
index c27b45a5a2..cd6224a544 100644
--- a/.github/workflows/auto-label.yml
+++ b/.github/workflows/auto-label.yml
@@ -10,10 +10,18 @@ jobs:
   triage:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate GitHub App token
+        id: triage-app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.TRAIGE_APP_ID }}
+          private-key: ${{ secrets.TRIAGE_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+
       - name: Process Issue or PR
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.PROJECT_TOKEN }}
+          github-token: ${{ steps.triage-app-token.outputs.token }}
           script: |
             // === 1. CONFIGURATION ===
             const PROJECT_NUMBER = 8; // <--- Replace with your project board number