Without https push, token may need in checkout phase

kachick · Sep 26, 2023 · 31a49de · 31a49de
1 parent 2cc045d
commit 31a49de
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/update-nixpkgs.yml b/.github/workflows/update-nixpkgs.yml
@@ -19,15 +19,18 @@ jobs:
     env:
       PR_BRANCH: update-nixpkgs-${{ github.run_id }}
     steps:
-      - uses: actions/checkout@v4
-      # To trigger CIs
+      # To push workflow changes and trigger CIs
       - name: Generate GitHub Apps token
         if: (github.event.sender.login == 'kachick') || (github.event_name != 'pull_request')
         id: publish-token
         uses: tibdex/github-app-token@v2
         with:
           app_id: ${{ secrets.APP_ID }}
           private_key: ${{ secrets.PRIVATE_KEY }}
+      - uses: actions/checkout@v4
+        with:
+          # https://github.com/orgs/community/discussions/27072#discussioncomment-3254515
+          token: ${{ steps.publish-token.outputs.token }}
       - uses: DeterminateSystems/nix-installer-action@v4
       - uses: DeterminateSystems/magic-nix-cache-action@v2
       - name: Prepare Git