feat: optional token in checkout and in comment-pr

actions/checkout/README.md

@@ -48,6 +48,11 @@ permissions:
     #
     # Default: false
     lfs: ""
+
+    # Description: Token to use for checking out the repository instead of the default GITHUB_TOKEN.
+    # If specified and not empty, persist-credentials in checkout will be false.
+    #
+    token: ""
 ```
 
 <!-- end usage -->
@@ -57,6 +62,7 @@ permissions:
 | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- | ------------ |
 | <code>fetch-depth</code> | Number of commits to fetch. 0 indicates all history for all branches and tags. See [https://github.com/actions/checkout#usage](https://github.com/actions/checkout#usage) | <code>1</code> | **false**    |
 | <code>lfs</code>         | Whether to download Git-LFS files. See [https://github.com/actions/checkout#usage](https://github.com/actions/checkout#usage)                                             |                | **false**    |
+| <code>token</code>         | Token to use for checking out the repository instead of the default GITHUB_TOKEN. If specified and not empty, persist-credentials in checkout will be false.                                             |                | **false**    |
 
 <!-- end inputs -->
 <!-- start outputs -->

actions/checkout/action.yml

@@ -12,6 +12,11 @@ inputs:
   lfs:
     description: "Whether to download Git-LFS files. See [https://github.com/actions/checkout#usage](https://github.com/actions/checkout#usage)"
     default: false
+  token:
+    description: |
+      Token to use for checking out the repository instead of the default GITHUB_TOKEN.
+      If specified and not empty, persist-credentials in checkout will be false.
+    required: false
 
 runs:
   using: "composite"
@@ -22,9 +27,13 @@ runs:
         ref: refs/pull/${{ github.event.issue.number }}/head
         fetch-depth: ${{ inputs.fetch-depth }}
         lfs: ${{ inputs.lfs }}
+        token: ${{ inputs.token || github.token }}
+        persist-credentials: ${{ inputs.token == '' }}
 
     - uses: actions/checkout@v4
       if: github.event_name != 'issue_comment'
       with:
         fetch-depth: ${{ inputs.fetch-depth }}
         lfs: ${{ inputs.lfs }}
+        token: ${{ inputs.token || github.token }}
+        persist-credentials: ${{ inputs.token == '' }}

actions/create-or-update-comment/README.md

@@ -49,6 +49,15 @@ permissions:
     # [https://github.com/peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment)
     #
     reactions: ""
+
+    # Description: The comment author. Default is github-actions[bot].
+    #
+    comment-author: ""
+
+    # Description: Optional token to interact with GitHub API.
+    # If not defined or empty, the action will use the GITHUB_TOKEN provided by GitHub.
+    #
+    token: ""
 ```
 
 <!-- end usage -->
@@ -59,7 +68,8 @@ permissions:
 | <code>title</code>     | The comment title. Must be static and unique, will be used to retrieve the comment if exists already.                                                                             |             | **true**     |
 | <code>body</code>      | The comment body. See [https://github.com/peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment)                                          |             | **false**    |
 | <code>reactions</code> | A comma separated list of reactions to add to the comment. See [https://github.com/peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) |             | **false**    |
-
+| <code>comment-author</code> | The comment author. Default is github-actions[bot]. | github-actions[bot] | **false**    |
+| <code>token</code> | Optional token to interact with GitHub API. If not defined or empty, the action will use the GITHUB_TOKEN provided by GitHub. | | **false**    |
 <!-- end inputs -->
 <!-- start outputs -->
 <!-- end outputs -->

actions/create-or-update-comment/action.yml

@@ -15,6 +15,15 @@ inputs:
   reactions:
     description: "A comma separated list of reactions to add to the comment. See [https://github.com/peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment)"
     required: false
+  comment-author:
+    description: "The comment author. Default is github-actions[bot]."
+    required: false
+    default: "github-actions[bot]"
+  token:
+    description: |
+      Optional token to interact with GitHub API.
+      If not defined or empty, the action will use the GITHUB_TOKEN provided by GitHub.
+    required: false
 
 runs:
   using: "composite"
@@ -36,8 +45,10 @@ runs:
       id: find-comment
       with:
         issue-number: ${{ steps.get-issue-number.outputs.issue-number }}
-        comment-author: github-actions[bot]
+        comment-author: ${{ inputs.comment-author }}
         body-includes: ${{ inputs.title }}
+        token: ${{ inputs.token || github.token }}
+
 
     - uses: peter-evans/create-or-update-comment@v4
       with:
@@ -49,3 +60,4 @@ runs:
 
           ${{ inputs.body }}
         reactions: ${{ inputs.reactions }}
+        token: ${{ inputs.token || github.token }}