Generate a new token for each job

runtimeverification · Dec 3, 2024 · 53976a8 · 53976a8
1 parent 03faaef
commit 53976a8
Showing 1 changed file with 11 additions and 3 deletions.
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -38,9 +38,17 @@ jobs:
       matrix:
         value: ${{fromJson(needs.list.outputs.matrix)}}
     steps:
+      - name: 'Generate GitHub App Token'
+        id: automerge_token
+        uses: actions/[email protected]
+        with:
+          app-id: ${{ secrets.AUTOMERGE_APP_ID }}
+          private-key: ${{ secrets.AUTOMERGE_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+
       - name: 'Check Automerge Repo to Test'
         env:
-          token: ${{ needs.list.outputs.token }}
+          token: ${{ steps.automerge_token.outputs.token }}
         uses: actions/checkout@v4
 
       - name: 'Automerge runtimeverification/${{ matrix.value }}'
@@ -49,7 +57,7 @@ jobs:
         with:
           org: 'runtimeverification'
           repo: ${{ matrix.value }}
-          token: ${{ needs.list.outputs.token }}
+          token: ${{ steps.automerge_token.outputs.token }}
           debug: --dry-run
 
       - name: 'Automerge runtimeverification/${{ matrix.value }}'
@@ -58,7 +66,7 @@ jobs:
         with:
           org: 'runtimeverification'
           repo: ${{ matrix.value }}
-          token: ${{ needs.list.outputs.token }}
+          token: ${{ steps.automerge_token.outputs.token }}
           debug: --dry-run
           comment: 'true'