Function importSigningKey

shared/github/app-auth.ts:121–132

(privateKey: string)

}

async function importSigningKey(privateKey: string): Promise<CryptoKey> {
    const pem = normalizePem(privateKey);
    const der = pemToDer(pem);
    const pkcs8 = /BEGIN RSA PRIVATE KEY/.test(pem) ? pkcs1ToPkcs8(der) : der;
    return crypto.subtle.importKey(
        "pkcs8",
        pkcs8 as BufferSource,
        { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
        false,
        ["sign"],
    );
}

/** Mint a short-lived App JWT (valid ~9 min, iat backdated for clock skew). */
async function mintAppJwt(creds: GithubAppCredentials): Promise<string> {