Skip to content

Commit 80510a8

Browse files
authored
chore: Use PAT for release-please. (#206)
## Summary Uses a PAT for release-please to allow for required CI checks. ## How did you test this change? <!-- Frontend - Leave a screencast or a screenshot to visually describe the changes. --> ## Are there any deployment considerations? <!-- Backend - Do we need to consider migrations or backfilling data? -->
1 parent 3092c8f commit 80510a8

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

.github/workflows/release-please.yml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ jobs:
88
release-package:
99
runs-on: ubuntu-latest
1010
permissions:
11+
id-token: write
1112
contents: write # Contents and pull-requests are for release-please to make releases.
1213
pull-requests: write
1314
issues: write
@@ -19,8 +20,17 @@ jobs:
1920
dotnet-plugin-released: ${{ steps.release.outputs['sdk/@launchdarkly/observability-dotnet--release_created'] }}
2021
dotnet-plugin-tag-name: ${{ steps.release.outputs['sdk/@launchdarkly/observability-dotnet--tag_name'] }}
2122
steps:
23+
# Normally a workflow cannot trigger another workflow. For this workflow we need to run required checks.
24+
# Github determines that something is created by a workflow/bot based on the token.
25+
- uses: launchdarkly/gh-actions/actions/[email protected]
26+
name: 'Get PAT'
27+
with:
28+
aws_assume_role: ${{ vars.AWS_ROLE_ARN }}
29+
ssm_parameter_pairs: '/production/common/releasing/o11y_gh_pat = GITHUB_PAT'
2230
- uses: googleapis/release-please-action@a02a34c4d625f9be7cb89156071d8567266a2445
2331
id: release
32+
with:
33+
token: ${{ env.GITHUB_PAT }}
2434

2535
- uses: actions/checkout@v4
2636
if: ${{ steps.release.outputs.releases_created == 'true' }}

0 commit comments

Comments
 (0)