Merge pull request #186 from nscuro/bot-token

Use bot account when creating releases via GitHub Actions

Author: nscuro

.github/workflows/ci-publish.yaml

@@ -66,8 +66,7 @@ jobs:
 
       - name: Update Release
         env:
-          # or change it to a custom PAT that should be credited for the release
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.BOT_RELEASE_TOKEN }}
         run: |-
           cat << EOF >> .github/default-release-notes.md
           \`\`\`text

.github/workflows/ci-release.yaml

@@ -30,20 +30,17 @@ jobs:
           cache: 'npm'
 
       - name: Bump version and tag via NodeJS
-        # if you use a bot-user to create the release in the next step
-        # then it might be a solid idea to change the git config values below to the bot-user's name + email
         run: |-
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config user.name "dependencytrack-bot"
+          git config user.email "106437498+dependencytrack-[email protected]"
 
           npm version ${{ github.event.inputs.version-to-bump }} -m "prepare-release: set version to %s"
 
           git push origin "HEAD:refs/heads/master"
 
       - name: Create GitHub Release
         env:
-          # or change it to a custom PAT that should be credited for the release
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.BOT_RELEASE_TOKEN }}
           GH_OPTS: ""
         run: |-
           VERSION=`jq -r '.version' package.json`