Skip to content
agent-ops
Menu

1Password

1Password

Each run reads the GitHub App credentials from a 1Password vault item with a service account.

The runner reads the App’s ID, installation ID and private key with op item get, authenticated by a service account token set in the runner’s own environment file, not in any workflow.