diff --git a/.github/workflows/auto-merge-speakeasy-pr.yaml b/.github/workflows/auto-merge-speakeasy-pr.yaml index 9ba77ed..e0035f8 100644 --- a/.github/workflows/auto-merge-speakeasy-pr.yaml +++ b/.github/workflows/auto-merge-speakeasy-pr.yaml @@ -31,9 +31,17 @@ jobs: ) runs-on: ubuntu-latest steps: + - name: Generate GitHub App token + id: app-token + # actions/create-github-app-token@v3.2.0 (immutable SHA) + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 + with: + app-id: ${{ secrets.GH_DOCS_SYNC_APP_ID }} + private-key: ${{ secrets.GH_DOCS_SYNC_APP_PRIVATE_KEY }} + - name: Close superseded Speakeasy PRs env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_TOKEN: ${{ steps.app-token.outputs.token }} run: | set -euo pipefail CURRENT_PR="${{ github.event.pull_request.number }}" @@ -64,7 +72,7 @@ jobs: - name: Auto-merge Speakeasy PR env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_TOKEN: ${{ steps.app-token.outputs.token }} run: | set -euo pipefail PR_NUM="${{ github.event.pull_request.number }}"