ci: use github app token instead of PAT (#10)

meskill · Sep 15, 2021 · 8878bb5 · 8878bb5
1 parent 28ae593
commit 8878bb5
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 5 deletions.
diff --git a/.github/workflows/branch-test.yml b/.github/workflows/branch-test.yml
@@ -11,14 +11,20 @@ jobs:
   test-publish:
     runs-on: ubuntu-20.04
     steps:
+      - name: Generate Token
+        id: generate-token
+        uses: tibdex/github-app-token@v1
+        with:
+          app_id: ${{ secrets.TOKEN_APP_ID }}
+          private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
       - name: Checkout
         uses: actions/checkout@v2
         with:
-          persist-credentials: false
+          token: ${{ steps.generate-token.outputs.token }}
       - name: Dry-Run Release
         uses: ridedott/release-me-action@v3
         env:
-          GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
         with:
           dry-run: true
           node-module: true

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,10 +19,16 @@ jobs:
   publish:
     runs-on: ubuntu-20.04
     steps:
+      - name: Generate Token
+        id: generate-token
+        uses: tibdex/github-app-token@v1
+        with:
+          app_id: ${{ secrets.TOKEN_APP_ID }}
+          private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
       - name: Checkout
         uses: actions/checkout@v2
         with:
-          persist-credentials: false
+          token: ${{ steps.generate-token.outputs.token }}
       - name: Setup Node
         uses: actions/setup-node@v2
         with:
@@ -36,7 +42,7 @@ jobs:
         id: release
         uses: ridedott/release-me-action@v3
         env:
-          GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
         with:
           dry-run: true
           node-module: true
@@ -64,7 +70,7 @@ jobs:
       - name: Release
         uses: ridedott/release-me-action@v3
         env:
-          GITHUB_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
         with:
           dry-run: false
           release-assets: release.zip