Use app token for automerge

tgstation · Aug 21, 2024 · 5c4767d · 5c4767d
1 parent 0bffb62
commit 5c4767d
Showing 1 changed file with 15 additions and 3 deletions.
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
@@ -16,10 +16,22 @@ jobs:
     name: Enable Automerge on Dependabot PRs
     runs-on: ubuntu-latest
     if: github.event.pull_request.user.id == 49699333
-    permissions:
-      pull-requests: write
     steps:
+      - name: Tool Checkout
+        uses: actions/checkout@v4
+
+      - name: Build
+        run: |
+          cd tools/Tgstation.Server.DeploymentsTool
+          dotnet publish -c Release -o ${{ runner.temp }}/tool
+
+      - name: Generate App Token
+        run: |
+          dotnet ${{ runner.temp }}/tool/Tgstation.Server.DeploymentsTool.dll ${{ secrets.TGS_CI_GITHUB_APP_TOKEN_SERIALIZED }} token ${{ runner.temp }}/installation_secret.txt
+          echo "INSTALLATION_TOKEN=$(cat ${{ runner.temp }}/installation_secret.txt)" >> $GITHUB_ENV
+          rm ${{ runner.temp }}/installation_secret.txt
+
       - name: Enable Automerge
         uses: daneden/enable-automerge-action@f8558b65c5b8d8bfb592c4e74e3d491624a38fbd #v1.0.2-ish
         with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ env.INSTALLATION_TOKEN }}