ci: Use official GH action for app token

This commit is contained in:
Bernd Schorgers 2023-12-02 12:11:35 +01:00
parent 1124366e18
commit fbeaa67f7d
No known key found for this signature in database
GPG key ID: BC5E2BD907F9A8EC
3 changed files with 21 additions and 21 deletions

View file

@ -24,24 +24,24 @@ jobs:
name: Release charts name: Release charts
runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
steps: steps:
- name: Get GitHub API token - name: "Generate Short Lived OAuth App Token (ghs_*)"
id: get-app-token uses: actions/create-github-app-token@v1.6.1
uses: getsentry/action-github-app-token@v2 id: app-token
with: with:
app_id: ${{ secrets.BJWS_APP_ID }} app-id: "${{ secrets.BJWS_APP_ID }}"
private_key: ${{ secrets.BJWS_APP_PRIVATE_KEY }} private-key: "${{ secrets.BJWS_APP_PRIVATE_KEY }}"
- name: Checkout charts branch - name: Checkout charts branch
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.app-token.outputs.token }}
path: "src" path: "src"
fetch-depth: 0 fetch-depth: 0
- name: Checkout gh-pages branch - name: Checkout gh-pages branch
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.app-token.outputs.token }}
path: "dest" path: "dest"
ref: "gh-pages" ref: "gh-pages"
fetch-depth: 0 fetch-depth: 0
@ -91,6 +91,6 @@ jobs:
if: ${{ steps.auto-commit.outputs.changes_detected }} if: ${{ steps.auto-commit.outputs.changes_detected }}
id: wait-for-deploy id: wait-for-deploy
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.app-token.outputs.token }}
ref: ${{ steps.auto-commit.outputs.commit_hash }} ref: ${{ steps.auto-commit.outputs.commit_hash }}
checkName: deploy checkName: deploy

View file

@ -20,17 +20,17 @@ jobs:
concurrency: concurrency:
group: ${{ github.workflow }}-${{ github.ref }} group: ${{ github.workflow }}-${{ github.ref }}
steps: steps:
- name: Get GitHub API token - name: "Generate Short Lived OAuth App Token (ghs_*)"
id: get-app-token uses: actions/create-github-app-token@v1.6.1
uses: getsentry/action-github-app-token@v2 id: app-token
with: with:
app_id: ${{ secrets.BJWS_APP_ID }} app-id: "${{ secrets.BJWS_APP_ID }}"
private_key: ${{ secrets.BJWS_APP_PRIVATE_KEY }} private-key: "${{ secrets.BJWS_APP_PRIVATE_KEY }}"
- name: Checkout main branch - name: Checkout main branch
uses: actions/checkout@v4 uses: actions/checkout@v4
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.app-token.outputs.token }}
fetch-depth: 0 fetch-depth: 0
- uses: actions/setup-python@v4 - uses: actions/setup-python@v4
@ -47,7 +47,7 @@ jobs:
uses: peaceiris/actions-gh-pages@v3.9.3 uses: peaceiris/actions-gh-pages@v3.9.3
if: ${{ github.ref == 'refs/heads/main' }} if: ${{ github.ref == 'refs/heads/main' }}
with: with:
github_token: ${{ steps.get-app-token.outputs.token }} github_token: ${{ steps.app-token.outputs.token }}
publish_dir: ./site publish_dir: ./site
destination_dir: docs destination_dir: docs
user_name: "bjw-s-bot[bot]" user_name: "bjw-s-bot[bot]"

View file

@ -24,17 +24,17 @@ jobs:
name: Tag charts name: Tag charts
runs-on: ubuntu-22.04 runs-on: ubuntu-22.04
steps: steps:
- name: Get GitHub API token - name: "Generate Short Lived OAuth App Token (ghs_*)"
id: get-app-token uses: actions/create-github-app-token@v1.6.1
uses: getsentry/action-github-app-token@v2 id: app-token
with: with:
app_id: ${{ secrets.BJWS_APP_ID }} app-id: "${{ secrets.BJWS_APP_ID }}"
private_key: ${{ secrets.BJWS_APP_PRIVATE_KEY }} private-key: "${{ secrets.BJWS_APP_PRIVATE_KEY }}"
- name: Checkout chart sources - name: Checkout chart sources
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
with: with:
token: ${{ steps.get-app-token.outputs.token }} token: ${{ steps.app-token.outputs.token }}
fetch-depth: 0 fetch-depth: 0
- name: Create git tag for charts - name: Create git tag for charts