From 923613db5ed96e41ee8d50b205e403f61dcd73cd Mon Sep 17 00:00:00 2001 From: auricom <27022259+auricom@users.noreply.github.com> Date: Tue, 26 Nov 2024 03:23:19 +0100 Subject: [PATCH] ci: checkout with app-token (dependabot-update-all) (#22612) --- .github/workflows/dependabot-update-all.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/dependabot-update-all.yml b/.github/workflows/dependabot-update-all.yml index d2f30d351b..9baac6edc2 100644 --- a/.github/workflows/dependabot-update-all.yml +++ b/.github/workflows/dependabot-update-all.yml @@ -13,10 +13,17 @@ jobs: runs-on: ubuntu-latest if: ${{ github.actor == 'dependabot[bot]' }} steps: + - name: Generate Token + uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1 + id: app-token + with: + app-id: "${{ secrets.APP_ID }}" + private-key: "${{ secrets.APP_PRIVATE_KEY }}" - uses: actions/checkout@v4 with: repository: ${{ github.event.pull_request.head.repo.full_name }} ref: ${{ github.event.pull_request.head.ref }} + token: "${{ steps.app-token.outputs.token }}" - uses: actions/setup-go@v5 with: go-version: "1.23"