Permission-based access to access maven reposiotry

[pawel-jedruch-swiftpay]

Select Topic Area

Question

Body

I would like to use the create-github-app-token to set-up a ci/cd without personal classic access token. Currently it looks like the Github Maven Repository doesn't support the permission-based access, so I'm cannot follow the flow from: actions/create-github-app-token@v1.

Example of the flow that isn't working for me, can be find here: actions/create-github-app-token#130

Is there a way to authorize with maven repository using the permission-based access token ? Without this, we have to stick to using the personal access token for shared CI/CD configurations across whole organization.

[OliverMeyerDSA]

We looked into this for some days and came to the conclusion that it is ONLY possible using personal access tokens (classic) :(
The documentation says:
To authenticate to a GitHub Packages registry within a GitHub Actions workflow, you can use [..] a personal access token (classic) with at least read:packages scope to install packages associated with other private repositories

We tried a lot to read from the maven repository of another private repository in other ways in failed in multiple ways.