feat(workflows): add renovate-app-token reusable workflow for Mend Renovate (#43)

workflow_call reusable workflow that exposes a GitHub App installation token. Mend Renovate will use this token to push commits. Refs: PRI-413 Co-authored-by: Chris Farhood <chris@farhood.org>
2026-05-04 21:19:09 +00:00
parent d9fec8b93c
commit 6459913304
1 changed files with 21 additions and 0 deletions
@@ -0,0 +1,21 @@
+name: Mend Renovate GitHub App Token
+
+on:
+  workflow_call:
+    outputs:
+      token:
+        description: "Short-lived GitHub App installation token"
+        value: ${{ jobs.app-token.outputs.token }}
+
+jobs:
+  app-token:
+    runs-on: runners-privilegedescalation
+    outputs:
+      token: ${{ steps.app-token.outputs.token }}
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}