chore: use token when specifying origin in autoconfig generation (#3655)

* chore: use token when specifying origin in autoconfig generation

* try inlining secret directly

* specify token on checkout

* try not persisting credentials

* debug

* remove debug output, try chaging origin

* introduce test code

* fail on error, print debug info

* remove stash pop from test code

* introduce author info to test code

* test commit

* comment out test code, ready for production test

* remove test code

* remove whitespace

---------

Co-authored-by: Cloud Java Bot <[email protected]>

Author: diegomarquezp

.github/workflows/generateAutoConfigs.yaml

@@ -19,8 +19,13 @@ jobs:
     # log information required for manually triggering workflow and exit with error to block PR
     if: ${{ (github.event_name == 'workflow_dispatch') || startsWith(github.head_ref, 'renovate/main-gcp-libraries-bom.version') || startsWith(github.head_ref, 'dependabot/maven/com.google.cloud-libraries-bom') }}
     runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
+          persist-credentials: false
       - name: Get PR info
         id: get_pr_info
         continue-on-error: false
@@ -57,8 +62,6 @@ jobs:
         uses: actions/setup-java@v1
         with:
           java-version: 17
-        env:
-          GITHUB_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
       - run: bazelisk version
       - uses: actions/setup-go@v3
       - name: Install buildozer
@@ -147,6 +150,8 @@ jobs:
             git commit -m "chore: update starter modules in spring-cloud-previews"
             git push https://github.com/${{ github.event.inputs.forked_repo }}.git HEAD:${{ github.event.inputs.branch_name }}
           else
+            git remote remove origin
+            git remote add origin https://${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}@github.com/GoogleCloudPlatform/spring-cloud-gcp.git
             git fetch origin ${{ github.event.inputs.branch_name }}
             git checkout ${{ github.event.inputs.branch_name }}
             git reset --hard
@@ -156,7 +161,3 @@ jobs:
             git push -u origin ${{ github.event.inputs.branch_name }}
           fi
 
-        env:
-          GITHUB_ACTOR_EMAIL: ${{ steps.determine_workflow_author_email.outputs.GITHUB_ACTOR_EMAIL }}
-          GITHUB_ACTOR_NAME: ${{ steps.determine_workflow_author_email.outputs.GITHUB_ACTOR_NAME }}
-          GITHUB_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}

test

@@ -0,0 +1 @@
+test