diff options
| author | seth <[email protected]> | 2024-09-30 17:10:00 -0400 |
|---|---|---|
| committer | seth <[email protected]> | 2024-09-30 17:10:00 -0400 |
| commit | 77309844e6b890544bc4eea7f03bbafe493ba61e (patch) | |
| tree | 0db923611b37e7d0bb1348f999a9e32cda889ad8 /.github/workflows/autobot.yaml | |
| parent | 7285c13651cb7aa9c11d51760b7ee9447e86069c (diff) | |
ci: use github app for dependabot PRs
Diffstat (limited to '.github/workflows/autobot.yaml')
| -rw-r--r-- | .github/workflows/autobot.yaml | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/.github/workflows/autobot.yaml b/.github/workflows/autobot.yaml index 4e74d0a..f1ebe4e 100644 --- a/.github/workflows/autobot.yaml +++ b/.github/workflows/autobot.yaml @@ -9,20 +9,23 @@ jobs: runs-on: ubuntu-latest - permissions: - contents: write - pull-requests: write - steps: + - name: Generate GitHub App token + uses: actions/create-github-app-token@v1 + id: app-token + with: + app-id: ${{ vars.APP_ID }} + private-key: ${{ secrets.PRIVATE_KEY }} + - name: Fetch metadata uses: dependabot/fetch-metadata@v2 id: metadata with: - github-token: ${{ github.token }} + github-token: ${{ steps.app-token.outputs.token }} - name: Enable auto-merge - if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' + if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' }} run: gh pr merge --auto --squash "$PR" env: - GH_TOKEN: ${{ github.token }} PR: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ steps.app-token.outputs.token }} |