Avocado bot token in release workflow

It adds Avocado bot organization token to the release workflow instead of personal token. This makes the release independent to one specific avocado maintainer. Signed-off-by: Jan Richter <[email protected]>
richtja · Mar 26, 2024 · 75eca6b · 75eca6b
1 parent e2755cb
commit 75eca6b
Showing 1 changed file with 56 additions and 49 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -40,6 +40,13 @@ jobs:
       URL: "https://readthedocs.org/api/v3/projects/${{ github.event.inputs.rtd_project }}"
 
     steps:
+      - name: Generate token
+        id: generate_token
+        uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c
+        with:
+          app_id: ${{ secrets.MR_AVOCADO_ID }}
+          installation_id: ${{ secrets.MR_AVOCADO_INSTALLATION_ID }}
+          private_key: ${{ secrets.MR_AVOCADO_PRIVATE_KEY }}
       - name: install required packages
         run:  dnf -y install rpmdevtools git python3-pip make
       - uses: actions/checkout@v3
@@ -59,53 +66,53 @@ jobs:
       - name: Push changes to github
         uses: ad-m/github-push-action@master
         with:
-          github_token: ${{ secrets.RELEASE_TOKEN }}
+          github_token: ${{ steps.generate_token.outputs.token }}
           branch: ${{ github.ref }}
-      - name: Build wheel
-        run: make -f Makefile.gh build-wheel check-wheel
-      - name: Save wheel as artifact
-        uses: actions/upload-artifact@v3
-        with:
-          name: wheel
-          path: ${{github.workspace}}/PYPI_UPLOAD/
-          retention-days: 3
-      - name: Build documentation readthedocs
-        run: |
-          make -f Makefile.gh build-update-readthedocs
-      - run: echo "In a few minutes the release documentation will be available in https://${{ github.event.inputs.rtd_project }}.readthedocs.io/en/${{ github.event.inputs.version }}/"
-      - name: Upload to pypi
-        continue-on-error: true
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USER }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWD }}
-        run: make -f Makefile.gh update-pypi
-
-  build-and-publish-eggs:
-    name: Build eggs and publish them
-    runs-on: ubuntu-20.04
-    needs: release
-    strategy:
-      matrix:
-        python-version: [3.8.16, 3.9.16, 3.10.9, 3.11.1, 3.12.0]
-      fail-fast: false
-
-    steps:
-      - uses: actions/checkout@v3
-        with:
-          persist-credentials: false
-          fetch-depth: 0
-          ref: ${{ github.event.inputs.version }}
-      - name: Set up Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: ${{ matrix.python-version }}
-      - name: Build eggs
-        run: make -f Makefile.gh build-egg
-      - name: Upload binaries to release
-        uses: svenstaro/upload-release-action@v2
-        with:
-          repo_token: ${{ secrets.RELEASE_TOKEN }}
-          file: ${{ github.workspace }}/EGG_UPLOAD/avocado_framework*egg
-          tag: ${{ github.event.inputs.version }}
-          overwrite: true
-          file_glob: true
+            #      - name: Build wheel
+            #        run: make -f Makefile.gh build-wheel check-wheel
+            #      - name: Save wheel as artifact
+            #        uses: actions/upload-artifact@v3
+            #        with:
+            #          name: wheel
+            #          path: ${{github.workspace}}/PYPI_UPLOAD/
+            #          retention-days: 3
+            #      - name: Build documentation readthedocs
+            #        run: |
+            #          make -f Makefile.gh build-update-readthedocs
+            #      - run: echo "In a few minutes the release documentation will be available in https://${{ github.event.inputs.rtd_project }}.readthedocs.io/en/${{ github.event.inputs.version }}/"
+            #      - name: Upload to pypi
+            #        continue-on-error: true
+            #        env:
+            #          TWINE_USERNAME: ${{ secrets.PYPI_USER }}
+            #          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWD }}
+            #        run: make -f Makefile.gh update-pypi
+            #
+            #  build-and-publish-eggs:
+            #    name: Build eggs and publish them
+            #    runs-on: ubuntu-20.04
+            #    needs: release
+            #    strategy:
+            #      matrix:
+            #        python-version: [3.8.16, 3.9.16, 3.10.9, 3.11.1, 3.12.0]
+            #      fail-fast: false
+            #
+            #    steps:
+            #      - uses: actions/checkout@v3
+            #        with:
+            #          persist-credentials: false
+            #          fetch-depth: 0
+            #          ref: ${{ github.event.inputs.version }}
+            #      - name: Set up Python
+            #        uses: actions/setup-python@v4
+            #        with:
+            #          python-version: ${{ matrix.python-version }}
+            #      - name: Build eggs
+            #        run: make -f Makefile.gh build-egg
+            #      - name: Upload binaries to release
+            #        uses: svenstaro/upload-release-action@v2
+            #        with:
+            #          repo_token: ${{ secrets.RELEASE_TOKEN }}
+            #          file: ${{ github.workspace }}/EGG_UPLOAD/avocado_framework*egg
+            #          tag: ${{ github.event.inputs.version }}
+            #          overwrite: true
+            #          file_glob: true