chore: authenticate renovate with github app

huxuan · Feb 23, 2024 · 49176ef · 49176ef
1 parent df3f6e0
commit 49176ef
Showing 1 changed file with 12 additions and 3 deletions.
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
@@ -13,12 +13,21 @@ jobs:
         RENOVATE_REPOSITORY_CACHE: enabled
         RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
       image: ghcr.io/renovatebot/renovate:37.202.2
+      options: '--user root'
     runs-on: ubuntu-latest
     steps:
       - run: env | sort
-      - run: |
-          if [ -z "${{ secrets.RENOVATE_TOKEN }}" ]; then
-            echo "RENOVATE_TOKEN not set, skipping ..."
+      - id: generate-token
+        name: Generate a token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ vars.BOT_APP_ID }}
+          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
+      - env:
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN || steps.generate-token.outputs.token }}
+        run: |
+          if [ -z "$RENOVATE_TOKEN" ]; then
+            echo "RENOVATE_TOKEN is not properly configured, skipping ..."
           else
             renovate $RENOVATE_EXTRA_FLAG
           fi