Merge pull request #467 from algorandfoundation/build/bot-token

build: generate and use engineering-ci bot token

Author: PatrickDinh

.github/workflows/remove-preview-apps.yaml

@@ -8,13 +8,20 @@ jobs:
   delete-preview-deployment:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate bot token
+        uses: actions/create-github-app-token@v1
+        id: app_token
+        with:
+          app-id: ${{ secrets.BOT_ID }}
+          private-key: ${{ secrets.BOT_SK }}
+
       - name: Get branch name
         id: get-branch
         run: echo "branch=$(gh pr view $PR_NO --repo $REPO --json headRefName --jq '.headRefName')" >> $GITHUB_OUTPUT
         env:
           REPO: ${{ github.repository }}
           PR_NO: ${{ github.event.pull_request.number }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app_token.outputs.token }}
 
       - name: Delete Cloudflare Pages preview deployments
         run: |
@@ -26,24 +33,24 @@ jobs:
             bash -c '
               PAGE=1
               DEPLOYMENT_IDS=""
-              
+
               while true; do
                 response=$(curl -s -X GET "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/pages/projects/$PROJECT/deployments?page=$PAGE" \
                   -H "Authorization: Bearer $AUTH_TOKEN" \
                   -H "Content-Type: application/json")
-                
+
                 page_ids=$(echo "$response" | jq -r --arg DEPLOY_BRANCH "$DEPLOY_BRANCH" '"'"'.result[] | select(.deployment_trigger.metadata.branch == $DEPLOY_BRANCH) | .id'"'"')
                 DEPLOYMENT_IDS+=" $page_ids"
-                
+
                 count=$(echo "$response" | jq -r .result_info.count)
-                
+
                 if [ "$count" -eq "0" ]; then
                   break
                 fi
-                
+
                 PAGE=$((PAGE + 1))
               done
-              
+
               echo "$DEPLOYMENT_IDS" | xargs
             '
           )