Skip to content

Commit a25db0d

Browse files
authored
chore(juno): generate gh app token instead of reading from secrets (#1136)
1 parent 8a44efa commit a25db0d

1 file changed

Lines changed: 9 additions & 1 deletion

File tree

.github/workflows/release.yaml

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,14 @@ jobs:
2323
published: ${{ steps.changesets.outputs.published }}
2424
publishedPackages: ${{ steps.changesets.outputs.publishedPackages }}
2525
steps:
26+
- name: Generate GitHub App Token
27+
id: github-app-token
28+
uses: actions/create-github-app-token@v1
29+
with:
30+
app-id: ${{ secrets.CLOUDOPERATOR_APP_ID }}
31+
private-key: ${{ secrets.CLOUDOPERATOR_APP_PRIVATE_KEY }}
32+
permission-contents: write
33+
permission-pull-requests: write
2634
- name: Checkout Repo
2735
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2836

@@ -56,7 +64,7 @@ jobs:
5664
title: "publish(npm): automate Package Versioning and Publishing with Changesets"
5765
commit: "chore(version): update versions with Changesets"
5866
env:
59-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
67+
GITHUB_TOKEN: ${{ steps.github-app-token.outputs.token }}
6068
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
6169

6270
notify-on-success:

0 commit comments

Comments
 (0)