fix: check_golang_profiler_changes github token (#149)

Author: korniltsev

.github/workflows/check_golang_profiler_changes.yml

@@ -7,6 +7,7 @@ on:
 
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   check_golang_profiler_changes:
@@ -20,9 +21,21 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version: '1.20'
+      - id: get-secrets
+        uses: grafana/shared-workflows/actions/get-vault-secrets@28361cdb22223e5f1e34358c86c20908e7248760
+        with:
+          repo_secrets: |
+            GRAFANA_PYROSCOPE_BOT_APP_APP_ID=grafana-pyroscope-bot:app-id
+            GRAFANA_PYROSCOPE_BOT_APP_PRIVATE_KEY=grafana-pyroscope-bot:app-private-key
+      - name: Generate token
+        id: generate_token
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
+        with:
+          app-id: ${{ env.GRAFANA_PYROSCOPE_BOT_APP_APP_ID }}
+          private-key: ${{ env.GRAFANA_PYROSCOPE_BOT_APP_PRIVATE_KEY }}
       - name: Check golang runtime profiler changes
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
         run: |
           cd godeltaprof/compat/cmd/check_golang_profiler_changes && go run main.go \
             -git.user.name="github-actions[bot]" \

godeltaprof/compat/cmd/check_golang_profiler_changes/main.go

@@ -19,8 +19,6 @@ var gitUserEmail = flag.String("git.user.email", "", "git user email")
 
 const goRepoURL = "https://github.com/golang/go.git"
 
-const myRemote = "origin"
-
 const mprof = "src/runtime/mprof.go"
 const pprof = "src/runtime/pprof"
 const repoDir = "go_repo"
@@ -120,7 +118,7 @@ func updatePR(prBodyFile string, request PullRequest) {
 		shMy.sh(fmt.Sprintf("git config user.email '%s'", *gitUserEmail))
 	}
 	shMy.sh(fmt.Sprintf("git commit -am '%s'", commitMessage))
-	shMy.sh(fmt.Sprintf("git push -f %s %s:%s", myRemote, branchName, request.HeadRefName))
+	shMy.sh(fmt.Sprintf("git push -f %s %s:%s", remote(), branchName, request.HeadRefName))
 
 	shMy.sh(fmt.Sprintf("gh pr edit %d --body-file '%s'", request.Number, prBodyFile))
 
@@ -136,12 +134,17 @@ func createPR(prBodyFile string) {
 		shMy.sh(fmt.Sprintf("git config user.email '%s'", *gitUserEmail))
 	}
 	shMy.sh(fmt.Sprintf("git commit -am '%s'", commitMessage))
-	shMy.sh(fmt.Sprintf("git push %s %s", myRemote, branchName))
+	shMy.sh(fmt.Sprintf("git push %s %s", remote(), branchName))
 
 	shMy.sh(fmt.Sprintf("gh pr create --title '%s' --body-file '%s' --label '%s' ", commitMessage, prBodyFile, label))
 
 }
 
+func remote() string {
+	token := strings.TrimSpace(os.Getenv("GITHUB_TOKEN"))
+	return fmt.Sprintf("https://x-access-token:%[email protected]/grafana/pyroscope-go.git", token)
+}
+
 func createCommitMessage() string {
 	return fmt.Sprintf("chore(check_golang_profiler_changes): acknowledge new golang profiler changes")
 }