Slack App Manifest for repeatable dev environments: choosing least-privilege scopes and Socket Mode vs Events API
Slack App Manifest setup for repeatable development I am defining a Slack app entirely through an App Manifest (YAML) so the same bot user, event subscriptions, and OAuth scopes can be recreated across disposable workspaces for development and CI. The manifest itself is under version control, while the bot token, app-level token, and signing secret are injec