Use a GitHub app to obtain an ephemeral token with permissions to pri…

…vate repos, then use it to clone private submodules
eosnetworkfoundation · Jan 25, 2023 · 36b72ae · 36b72ae
1 parent ce8ba6a
commit 36b72ae
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/contract.yml b/.github/workflows/contract.yml
@@ -8,10 +8,18 @@ jobs:
     runs-on: ubuntu-20.04
 
     steps:
+      - name: Authenticate
+        id: auth
+        uses: AntelopeIO/github-app-token-action@v1
+        with:
+          app_id: ${{ secrets.TRUSTEVM_CI_APP_ID }}
+          private_key: ${{ secrets.TRUSTEVM_CI_APP_KEY }}
+
       - name: Checkout Repo
         uses: actions/checkout@v3
         with:
           fetch-depth: 0
+          token: ${{ steps.auth.outputs.token }}
 
       - name: Download CDT
         uses: AntelopeIO/asset-artifact-download-action@v2