fix: use release app for Zoekt sync

[brendan-kellam]

Summary

• use the existing release GitHub App credentials for automated Zoekt submodule PRs
• retain the existing token permissions and repository restriction

Testing

• bash .github/scripts/testZoektSync.sh
• git diff --check

---

Note

Low Risk
Workflow-only secret rename with no change to automation logic or permissions; ensure the release App is installed with the same repo access as before.

Overview
The Sync Zoekt Submodule workflow now authenticates with the release GitHub App (RELEASE_APP_ID / RELEASE_APP_PRIVATE_KEY) instead of dedicated SOURCEBOT_SYNC_APP_* secrets.

Repository scope, contents/write and pull-requests/write permissions, and the rest of the automation steps are unchanged—only which App issues the token.

^{Reviewed by Cursor Bugbot for commit 2dae7c4. Bugbot is set up for automated code reviews on this repo. Configure here.}

Summary by CodeRabbit

• Chores
  • Updated workflow authentication to use the release app credentials.
  • No changes to sync behavior or user-facing functionality.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2b017488-ed7f-4576-b057-aaf7f8fdb43d

📥 Commits

Reviewing files that changed from the base of the PR and between dbc0ffd and 2dae7c4.

📒 Files selected for processing (1)

• .github/workflows/syncZoekt.yml

---

Walkthrough

The Zoekt synchronization workflow now generates its GitHub App token with the release app ID and private key secrets. Other workflow behavior is unchanged.

Changes

Zoekt sync credential update

Layer / File(s)	Summary
Update GitHub App token configuration .github/workflows/syncZoekt.yml	The token-generation step now uses RELEASE_APP_ID and RELEASE_APP_PRIVATE_KEY.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• sourcebot-dev/sourcebot#1560: Directly updates the GitHub App credentials used by the Zoekt synchronization workflow.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch brendan/use-release-app-secrets

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}