CCM-10193 use GitHub App token

Signed-off-by: Tim Ireland <[email protected]>

Author: timireland

.github/actions/build-proxies/action.yml

@@ -98,8 +98,8 @@ runs:
 
     - name: Trigger deploy proxy
       env:
-        CLIENT_ID: ${{ secrets.CLIENT_ID }}
-        PEM_FILE: ${{ secrets.PEM_FILE }}
+        CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
+        PEM_FILE: ${{ secrets.APP_PEM_FILE }}
       shell: bash
       run: |
         .github/scripts/dispatch_internal_repo_workflow.sh \

.github/scripts/dispatch_internal_repo_workflow.sh

@@ -111,12 +111,12 @@ while [[ $# -gt 0 ]]; do
   esac
 done
 
-if [[ -z "$PEM_FILE" ]]; then
+if [[ -z "$APP_PEM_FILE" ]]; then
   echo "[ERROR] PEM_FILE environment variable is not set or is empty."
   exit 1
 fi
 
-if [[ -z "$CLIENT_ID" ]]; then
+if [[ -z "$APP_CLIENT_ID" ]]; then
   echo "[ERROR] CLIENT_ID environment variable is not set or is empty."
   exit 1
 fi

.github/workflows/pr_closed.yaml

@@ -52,7 +52,8 @@ jobs:
 
       - name: Updating Main Environment
         env:
-          PR_TRIGGER_PAT: ${{ secrets.PR_TRIGGER_PAT }}
+          CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
+          PEM_FILE: ${{ secrets.APP_PEM_FILE }}
         run: |
           bash .github/scripts/dispatch_internal_repo_workflow.sh \
             --releaseVersion "main" \

.github/workflows/pr_create_dynamic_env.yaml

@@ -21,7 +21,8 @@ jobs:
       - uses: actions/[email protected]
       - name: Trigger dynamic environment creation
         env:
-          PR_TRIGGER_PAT: ${{ secrets.PR_TRIGGER_PAT }}
+          CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
+          PEM_FILE: ${{ secrets.APP_PEM_FILE }}
         shell: bash
         run: |
           .github/scripts/dispatch_internal_repo_workflow.sh \

.github/workflows/pr_destroy_dynamic_env.yaml

@@ -18,7 +18,8 @@ jobs:
 
       - name: Trigger dynamic environment destruction
         env:
-          PR_TRIGGER_PAT: ${{ secrets.PR_TRIGGER_PAT }}
+          CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
+          PEM_FILE: ${{ secrets.APP_PEM_FILE }}
         shell: bash
         run: |
           .github/scripts/dispatch_internal_repo_workflow.sh \

.github/workflows/release_created.yaml

@@ -28,7 +28,8 @@ jobs:
 
       - name: Deploy Nonprod Environment
         env:
-          PR_TRIGGER_PAT: ${{ secrets.PR_TRIGGER_PAT }}
+          CLIENT_ID: ${{ secrets.APP_CLIENT_ID }}
+          PEM_FILE: ${{ secrets.APP_PEM_FILE }}
         run: |
           bash .github/scripts/dispatch_internal_repo_workflow.sh \
             --releaseVersion "${{ github.event.release.tag_name }}" \

.github/workflows/stage-3-build.yaml

@@ -95,7 +95,6 @@ jobs:
     env:
       PROXYGEN_API_NAME: nhs-notify-supplier
       PR_NUMBER: ${{ inputs.pr_number }}
-      PR_TRIGGER_PAT: ${{ secrets.PR_TRIGGER_PAT }}
     steps:
       - name: "Checkout code"
         uses: actions/checkout@v4