privilegedescalation-engineer[bot]
6459913304
workflow_call reusable workflow that exposes a GitHub App installation token. Mend Renovate will use this token to push commits. Refs: PRI-413 Co-authored-by: Chris Farhood <chris@farhood.org>
22 lines
572 B
YAML
22 lines
572 B
YAML
name: Mend Renovate GitHub App Token
|
|
|
|
on:
|
|
workflow_call:
|
|
outputs:
|
|
token:
|
|
description: "Short-lived GitHub App installation token"
|
|
value: ${{ jobs.app-token.outputs.token }}
|
|
|
|
jobs:
|
|
app-token:
|
|
runs-on: runners-privilegedescalation
|
|
outputs:
|
|
token: ${{ steps.app-token.outputs.token }}
|
|
steps:
|
|
- name: Generate GitHub App token
|
|
id: app-token
|
|
uses: actions/create-github-app-token@v3
|
|
with:
|
|
app-id: ${{ secrets.RELEASE_APP_ID }}
|
|
private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
|