From c33b99a52c157427a8ff8670abf5c7916d29a70c Mon Sep 17 00:00:00 2001 From: Maximilian Techritz Date: Fri, 23 May 2025 15:16:58 +0200 Subject: [PATCH 1/3] feat(ci): use GH App token --- .github/workflows/release.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 4d99cba..df80c71 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -14,10 +14,18 @@ jobs: name: Release version runs-on: ubuntu-24.04 steps: + - name: Create GitHub App token + uses: actions/create-github-app-token@v2 + id: app-token + with: + # required + app-id: 1312871 + private-key: ${{ secrets.OPENMCP_CI_APP_PRIVATE_KEY }} + - name: Checkout code uses: actions/checkout@v4 with: - ssh-key: ${{ secrets.PUSH_KEY }} + token: ${{ steps.app-token.outputs.token }} fetch-tags: true fetch-depth: 0 submodules: recursive From db45fcc6e86f0931731b3da8f4699bed3132367c Mon Sep 17 00:00:00 2001 From: Maximilian Techritz Date: Fri, 23 May 2025 15:17:56 +0200 Subject: [PATCH 2/3] chore: update .gitignore --- .gitignore | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.gitignore b/.gitignore index ada68ff..41eb2bd 100644 --- a/.gitignore +++ b/.gitignore @@ -25,3 +25,5 @@ go.work *.swp *.swo *~ + +*.html From a1e5b1c9d45f765760eae23aee2cc36493035fa1 Mon Sep 17 00:00:00 2001 From: Maximilian Techritz Date: Fri, 23 May 2025 15:21:08 +0200 Subject: [PATCH 3/3] feat(ci): use GH App token --- .github/workflows/publish.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 156975b..230cfab 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -17,10 +17,18 @@ jobs: name: Release version runs-on: ubuntu-24.04 steps: + - name: Create GitHub App token + uses: actions/create-github-app-token@v2 + id: app-token + with: + # required + app-id: 1312871 + private-key: ${{ secrets.OPENMCP_CI_APP_PRIVATE_KEY }} + - name: Checkout code uses: actions/checkout@v4 with: - ssh-key: ${{ secrets.PUSH_KEY }} + token: ${{ steps.app-token.outputs.token }} fetch-tags: true fetch-depth: 0 submodules: recursive