diff --git a/.github/workflows/build-test-release.yaml b/.github/workflows/build-test-release.yaml index 780c73d..b5403b4 100644 --- a/.github/workflows/build-test-release.yaml +++ b/.github/workflows/build-test-release.yaml @@ -49,6 +49,13 @@ jobs: - uses: actions/checkout@v4 with: persist-credentials: false + - name: Generate GitHub App Token + id: app-token + uses: actions/create-github-app-token@v3 + with: + client-id: ${{ secrets.GH_APP_CLIENT_ID }} + private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} + owner: ${{ github.repository_owner }} - run: sudo snap install yq - uses: docker/setup-qemu-action@v3 - uses: docker/setup-buildx-action@v3 @@ -83,7 +90,7 @@ jobs: - id: semantic_release uses: splunk/semantic-release-action@v1.3 env: - GITHUB_TOKEN: ${{ secrets.GH_TOKEN_ADMIN }} + GITHUB_TOKEN: ${{ steps.app-token.outputs.token }} with: git_committer_name: ${{ secrets.SA_GH_USER_NAME }} git_committer_email: ${{ secrets.SA_GH_USER_EMAIL }} @@ -96,9 +103,16 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 + - name: Generate GitHub App Token + id: app-token + uses: actions/create-github-app-token@v3 + with: + client-id: ${{ secrets.GH_APP_CLIENT_ID }} + private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} + owner: ${{ github.repository_owner }} - uses: splunk/addonfactory-update-semver@v1 env: - GITHUB_TOKEN: ${{ secrets.GH_TOKEN_ADMIN }} + GITHUB_TOKEN: ${{ steps.app-token.outputs.token }} with: git_committer_name: ${{ secrets.SA_GH_USER_NAME }} git_committer_email: ${{ secrets.SA_GH_USER_EMAIL }}