ci: diagnose token expression

Author: Alberto-Codes

.github/workflows/diag-expr.yml

@@ -0,0 +1,37 @@
+name: Diag Expr
+
+on:
+  push:
+    branches: [diag/token-expr]
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Compare the fallback expression against the secret alone
+        env:
+          TOK_EXPR: ${{ secrets.RELEASE_PLEASE_TOKEN || secrets.GITHUB_TOKEN }}
+          TOK_DIRECT: ${{ secrets.RELEASE_PLEASE_TOKEN }}
+        run: |
+          set -u
+          echo "expr   len=${#TOK_EXPR} prefix=${TOK_EXPR%%_*}_"
+          echo "direct len=${#TOK_DIRECT} prefix=${TOK_DIRECT%%_*}_"
+          if [ "$TOK_EXPR" = "$TOK_DIRECT" ]; then echo "SAME token"; else echo "DIFFERENT token"; fi
+
+          echo "--- exact release-please payload, via the expression token ---"
+          curl -sS -o /tmp/a.json -w 'http=%{http_code}\n' \
+            -X POST -H "Authorization: token $TOK_EXPR" \
+            -H "Accept: application/vnd.github+json" \
+            https://api.github.com/repos/${{ github.repository }}/releases \
+            -d '{"name":"v1.3.0-diag","tag_name":"v1.3.0-diag","body":"diag notes","draft":false,"prerelease":false,"target_commitish":"25403c7"}'
+          echo "expr result: $(jq -r '.message // "created"' /tmp/a.json)"
+          ida=$(jq -r '.id // empty' /tmp/a.json)
+          if [ -n "$ida" ]; then
+            curl -sS -o /dev/null -w 'cleanup rel=%{http_code}\n' -X DELETE -H "Authorization: token $TOK_EXPR" \
+              https://api.github.com/repos/${{ github.repository }}/releases/$ida
+            curl -sS -o /dev/null -w 'cleanup tag=%{http_code}\n' -X DELETE -H "Authorization: token $TOK_EXPR" \
+              https://api.github.com/repos/${{ github.repository }}/git/refs/tags/v1.3.0-diag
+          fi