ci: checkout with app-token (dependabot-update-all) (#22612)

This commit is contained in:
auricom 2024-11-26 03:23:19 +01:00 committed by GitHub
parent 2d04a1af21
commit 923613db5e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -13,10 +13,17 @@ jobs:
runs-on: ubuntu-latest
if: ${{ github.actor == 'dependabot[bot]' }}
steps:
- name: Generate Token
uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1
id: app-token
with:
app-id: "${{ secrets.APP_ID }}"
private-key: "${{ secrets.APP_PRIVATE_KEY }}"
- uses: actions/checkout@v4
with:
repository: ${{ github.event.pull_request.head.repo.full_name }}
ref: ${{ github.event.pull_request.head.ref }}
token: "${{ steps.app-token.outputs.token }}"
- uses: actions/setup-go@v5
with:
go-version: "1.23"