From 73573a6ca794a8d72d30a0015b91e70084b3c715 Mon Sep 17 00:00:00 2001
From: eric-forte-elastic <eric.forte@elastic.co>
Date: Wed, 29 Jul 2026 21:57:58 -0400
Subject: [PATCH] use eph token

---
 .github/workflows/community.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/community.yml b/.github/workflows/community.yml
index 97abd4f..ab46333 100644
--- a/.github/workflows/community.yml
+++ b/.github/workflows/community.yml
@@ -13,12 +13,20 @@ jobs:
     permissions:
       issues: write
       pull-requests: write
+      id-token: write
     steps:
+      - name: Fetch ephemeral GitHub token
+        id: fetch-ephemeral-token
+        uses: elastic/ci-gh-actions/fetch-github-token@2feb1c6f5086cf8e06f61ef35e275abed3456f7b # v1.5.3
+        with:
+          vault-instance: "ci-prod"
+          vault-role: "token-policy-4a57efea1929"
+
       - name: Check if member of elastic org
         uses: actions/github-script@v6
         id: membership
         with:
-          github-token: ${{ secrets.READ_CORTADO_ELASTIC_ORG_TOKEN }}
+          github-token: ${{ steps.fetch-ephemeral-token.outputs.token }}
           result-encoding: string
           script: |