ci: use AgorapulseBot GH app to authenticate for release job

agorapulse · Oct 25, 2024 · 88e30db · 88e30db
1 parent bdfb885
commit 88e30db
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -45,14 +45,19 @@ jobs:
           - agorapulse/agorapulse-bom
           - agorapulse/agorapulse-oss
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.AGORAPULSE_BOT_APP_ID }}
+          private-key: ${{ secrets.AGORAPULSE_BOT_APP_PRIVATE_KEY }}
+      - uses: actions/checkout@v4
       - name: Semantic Version
         id: version
         uses: ncipollo/semantic-version-action@v1
       - name: Dispatch to ${{ matrix.repository }}
         uses: peter-evans/repository-dispatch@v1
         with:
-          token: ${{ secrets.AGORAPULSE_BOT_PERSONAL_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
           repository: ${{ matrix.repository }}
           event-type: ap-new-version-released-event
           client-payload: '{ "group": "com.agorapulse", "module": "micronaut-aws-sdk", "micronautCompatibility": [4], "version": "${{ steps.version.outputs.tag }}", "property" : "micronaut.aws.sdk.version", "github" : ${{ toJson(github) }} }'