ci: checkout with app-token (dependabot-update-all) (#22612)

cosmos · Nov 26, 2024 · 923613d · 923613d
1 parent 2d04a1a
commit 923613d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/dependabot-update-all.yml b/.github/workflows/dependabot-update-all.yml
@@ -13,10 +13,17 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
+      - name: Generate Token
+        uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1
+        id: app-token
+        with:
+          app-id: "${{ secrets.APP_ID }}"
+          private-key: "${{ secrets.APP_PRIVATE_KEY }}"
       - uses: actions/checkout@v4
         with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
           ref: ${{ github.event.pull_request.head.ref }}
+          token: "${{ steps.app-token.outputs.token }}"
       - uses: actions/setup-go@v5
         with:
           go-version: "1.23"