verify token is functional when fetching secrets from another github …

…environment

.github/workflows/get-secret-from-environment.yml

@@ -43,6 +43,17 @@ jobs:
             exit 1
           fi
 
+      - name: Verify GitHub token validity
+        id: verify-token
+        run: |
+          RESPONSE=$(curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer ${{ secrets.gh_token }}" \
+                            "https://api.github.com/user")
+          if [ "$RESPONSE" -ne 200 ]; then
+            echo "Invalid or expired GitHub token."
+            exit 1
+          fi
+          echo "GitHub token is valid."
+
       - name: Check if environment exists
         id: check-env
         run: |

CHANGELOG.md

@@ -75,6 +75,7 @@ INSERT CSV ROWS IN ENGLISH ONLY
 
 ### New features
 
+- Environment creator script now requires countries to provide a Github token with no expiry date. This is reduce effort in keeping the token up to date.
 - Certificate handlebar for registration fees `registrationFees` [#6817](https://github.com/opencrvs/opencrvs-core/issues/6817)
 - Logged in user details handlebar `loggedInUser` [#6529](https://github.com/opencrvs/opencrvs-core/issues/6529)
 - Supporting document fields can now be made required