From 99411f5b5ed660bda9c44452306b948f17900801 Mon Sep 17 00:00:00 2001 From: Darren Temple Date: Tue, 15 Apr 2025 16:41:41 +0100 Subject: [PATCH] chore: Replace personal access token with GitHub App Token --- .github/workflows/publish-to-npm.yaml | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-to-npm.yaml b/.github/workflows/publish-to-npm.yaml index 5213ff03..17af6048 100644 --- a/.github/workflows/publish-to-npm.yaml +++ b/.github/workflows/publish-to-npm.yaml @@ -10,10 +10,16 @@ jobs: if: ${{ !contains(github.event.head_commit.author.email, 'hello@openactive.io') }} steps: + - name: Generate GitHub App Token + uses: actions/create-github-app-token@v1 + id: generate-token + with: + app-id: ${{ secrets.GH_APP_ID }} + private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} - name: Checkout uses: actions/checkout@v2 with: - token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} - name: Identify run: | git config user.name OpenActive Bot @@ -43,9 +49,15 @@ jobs: repo: ['data-model-validator-site', 'openactive-test-suite'] runs-on: ubuntu-latest steps: + - name: Generate GitHub App Token + uses: actions/create-github-app-token@v1 + id: generate-token + with: + app-id: ${{ secrets.GH_APP_ID }} + private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} - name: Trigger tooling update uses: peter-evans/repository-dispatch@v1 with: - token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} repository: openactive/${{ matrix.repo }} event-type: data-model-validator-update