fix: experiment with app token in workflow

ibm-telemetry · Oct 25, 2023 · 7967583 · 7967583
1 parent 7ad700c
commit 7967583
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 3 deletions.
diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml
@@ -9,14 +9,21 @@ jobs:
   DCO:
     runs-on: ubuntu-latest
     steps:
-      - name: 'DCO Assistant'
+      - name: 'Generate token 🔐'
+        uses: tibdex/github-app-token@v2
+        id: generate_token
+        with:
+          app_id: ${{ secrets.TELEMETRY_APP_ID }}
+          private_key: ${{ secrets.TELEMETRY_APP_PRIVATE_KEY }}
+
+      - name: 'DCO Assistant 📝'
         if:
           (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the
           DCO document and I hereby sign the DCO.') || github.event_name == 'pull_request_target'
         uses: contributor-assistant/github-action@v2.3.1
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PERSONAL_ACCESS_TOKEN: ${{ secrets.DCO_PAT }}
+          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
+          PERSONAL_ACCESS_TOKEN: ${{ steps.generate_token.outputs.token }}
         with:
           path-to-signatures: 'dco-signatures.json'
           path-to-document: 'https://github.com/ibm-telemetry/telemetry-dco/blob/main/dco.md'

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
@@ -12,12 +12,20 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
+      - name: 'Generate token 🔐'
+        uses: tibdex/github-app-token@v2
+        id: generate_token
+        with:
+          app_id: ${{ secrets.TELEMETRY_APP_ID }}
+          private_key: ${{ secrets.TELEMETRY_APP_PRIVATE_KEY }}
+
       - name: Update release PR 🔄
         uses: google-github-actions/release-please-action@v3
         with:
           release-type: node
           draft-pull-request: true
           package-name: '@ibm/telemetry-js'
           pull-request-title-pattern: 'release${scope}: release${component} ${version}'
+          token: ${{ steps.generate_token.outputs.token }}
 
     # TODO: npm publication https://github.com/google-github-actions/release-please-action#automating-publication-to-npm