From ec9d7a59ce0dc09f833897316d06f381bae85ec5 Mon Sep 17 00:00:00 2001
From: Christian Zunker <827818+czunker@users.noreply.github.com>
Date: Tue, 21 Jan 2025 13:45:05 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=A7=B9=20Switch=20to=20app=20token=20for?=
 =?UTF-8?q?=20release=20(#354)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Christian Zunker <christian@mondoo.com>
---
 .github/workflows/gh-release.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gh-release.yaml b/.github/workflows/gh-release.yaml
index 43e0caf..38951e2 100644
--- a/.github/workflows/gh-release.yaml
+++ b/.github/workflows/gh-release.yaml
@@ -41,13 +41,20 @@ jobs:
         uses: actions/checkout@v4
       - name: Set release version
         run: echo "RELEASE_VERSION=$(cat VERSION)" >> $GITHUB_ENV
+      # fetch a token for the mondoo-mergebot app
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.MONDOO_MERGEBOT_APP_ID }}
+          private-key: ${{ secrets.MONDOO_MERGEBOT_APP_PRIVATE_KEY }}
       - name: Release
         uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ env.RELEASE_VERSION }}
           generate_release_notes: true
           make_latest: true
-          token: ${{ secrets.GH_BUILDER_TOKEN }}
+          token: ${{ steps.generate-token.outputs.token }}
       - name: Release file present?
         id: check_release_file
         uses: nick-fields/retry@v3