From e8224337bcdf08ccb9a96b1ecb7e54d9f7424dac Mon Sep 17 00:00:00 2001
From: "privilegedescalation-paperclip[bot]"
 <268365651+privilegedescalation-paperclip[bot]@users.noreply.github.com>
Date: Fri, 20 Mar 2026 00:46:07 +0000
Subject: [PATCH] ci: pass GitHub App token secrets to release workflow

The shared release workflow now requires RELEASE_APP_ID and
RELEASE_APP_PRIVATE_KEY secrets for PR creation, since the org
blocks GITHUB_TOKEN from creating PRs.

Depends on privilegedescalation/.github#31

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .github/workflows/release.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4952052..fcd339f 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -15,6 +15,9 @@ permissions:
 jobs:
   release:
     uses: privilegedescalation/.github/.github/workflows/plugin-release.yaml@main
+    secrets:
+      RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
+      RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
     with:
       version: ${{ inputs.version }}
       upstream-repo: 'rook/rook'
-- 
2.52.0