From e73f23dfb175ff49455e4775eef800729118851f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jo=C3=A3o=20Cerqueira?= <oss@cerqueira.io>
Date: Thu, 21 Oct 2021 13:07:34 +0100
Subject: [PATCH] ci(release): use release bot token on checkout

---
 .github/workflows/release.yml | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 07d9cdd..d3591fd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,9 +9,17 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
+      - id: release-bot
+        name: Authenticate with Release Bot
+        uses: getsentry/action-github-app-token@v1
+        with:
+          app_id: ${{ secrets.CB_RELEASE_BOT_ID }}
+          private_key: "${{ secrets.CB_RELEASE_BOT_PRIVATE_KEY }}"
+
       - name: Checkout
         uses: actions/checkout@v2
         with:
+          token: ${{ steps.release-bot.outputs.token }}
           fetch-depth: 0
 
       - uses: actions/setup-go@v2
@@ -21,17 +29,10 @@ jobs:
       - name: Install Git SemVer
         run: go install .
         
-      - id: release-bot
-        name: Authenticate with Release Bot
-        uses: getsentry/action-github-app-token@v1
-        with:
-          app_id: ${{ secrets.CB_RELEASE_BOT_ID }}
-          private_key: "${{ secrets.CB_RELEASE_BOT_PRIVATE_KEY }}"
-        
       - name: Setup Git Credentials
         uses: fusion-engineering/setup-git-credentials@v2
         with:
-          credentials: https://carlsberg-release-bot[bot]:${{ steps.release-bot.outputs.token }}@github.com/
+          credentials: https://${{ secrets.CB_RELEASE_BOT_NAME }}:${{ steps.release-bot.outputs.token }}@github.com/
 
       - name: Bump Version
         run: |