Merge pull request #5 from disneystreaming/dfrancoeur/token

Generate token

.github/workflows/auto-update.yml

@@ -16,12 +16,9 @@ jobs:
   build:
     name: Package and publish
     runs-on: ubuntu-latest
-    permissions:
-      # workflow triggered from tag creation can't run w/o this permission
-      actions: write
     steps:
       - name: Checkout current branch (full)
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           submodules: true
           fetch-depth: 0
@@ -37,9 +34,21 @@ jobs:
 
           ./scripts/auto-update.sh
 
+      # The original GITHUB_TOKEN has all it needs to create the tag
+      # but when it does, the CI workflow that should run, will not
+      # To workaround this issue, we create a temporary token, with more
+      # permissions to create tag
+      - name: Generate token
+        id: generate-token
+        uses: tibdex/github-app-token@v2
+        with:
+          app_id: 412514
+          private_key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Create tag
         uses: actions/github-script@v6
         with:
+          github-token: ${{ steps.generate-token.outputs.token }}
           script: |
             const { PUBLISH_VERSION } = process.env
             const tag = `v${PUBLISH_VERSION}`;