diff --git a/.github/workflows/gems-bump-version.yml b/.github/workflows/gems-bump-version.yml index a3a30ee8d4..0243bafb40 100644 --- a/.github/workflows/gems-bump-version.yml +++ b/.github/workflows/gems-bump-version.yml @@ -15,8 +15,16 @@ jobs: Create-PR-To-Bump-Dependabot-Gems-Version: runs-on: ubuntu-latest steps: + - name: Generate token + id: generate_token + uses: tibdex/github-app-token@b62528385c34dbc9f38e5f4225ac829252d1ea92 # v1.8.0 + with: + app_id: ${{ secrets.DEPENDABOT_CORE_ACTION_AUTOMATION_APP_ID }} + private_key: ${{ secrets.DEPENDABOT_CORE_ACTION_AUTOMATION_PRIVATE_KEY }} + - uses: actions/checkout@v3 with: + token: ${{ steps.generate_token.outputs.token }} # Ensure we start from main in case the workflow is run from a branch ref: "main" @@ -64,7 +72,7 @@ jobs: echo "PR created at URL: $PR_URL" echo "PR_URL=$PR_URL" >> $GITHUB_ENV env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_TOKEN: ${{ steps.generate_token.outputs.token }} - name: Set summary run: |