ci(generate-changelogs.yml): generate auth token on the fly (#489)

daeuniverse · Apr 2, 2024 · 8f79d3b · 8f79d3b
1 parent abcf1ed
commit 8f79d3b
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/.github/workflows/generate-changelogs.yml b/.github/workflows/generate-changelogs.yml
@@ -23,14 +23,22 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Generate GitHub Auth Token
+        # https://github.com/tibdex/github-app-token
+        id: generate_token
+        uses: tibdex/github-app-token@v2
+        with:
+          app_id: ${{ secrets.GH_APP_ID }}
+          private_key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
       - name: Generate release changelogs
         uses: daeuniverse/changelogs-generator-action@main
         id: changelog
         with:
           # https://github.com/daeuniverse/changelogs-generator-action
           previousRelease: ${{ inputs.previous_release_tag }}
           futureRelease: ${{ inputs.future_release_tag }}
-          token: ${{ secrets.GH_TOKEN }}
+          token: ${{ steps.generate_token.outputs.token }}
 
       - name: Print outputs
         shell: bash
@@ -41,7 +49,7 @@ jobs:
         if: ${{ inputs.dry_run == 'false' }}
         uses: dacbd/create-issue-action@main
         with:
-          token: ${{ secrets.GH_TOKEN }}
+          token: ${{ steps.generate_token.outputs.token }}
           title: '[Release Changelogs] ${{ inputs.future_release_tag }}'
           labels: automated-issue,release
           assignees: "sumire88,mzz2017,kunish,jschwinger233"