Merge pull request #11 from yijunge-ucb/DH-423

Merge DH to main

.github/workflows/build-push-create-pr.yaml

@@ -79,11 +79,18 @@ jobs:
       IMAGE_TAG: ${{ needs.build-and-push.outputs.image-tag }}
 
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.PRIVATE_KEY_SECRET}}
+          owner: ${{ github.repository_owner }}
+
       - name: Checkout the datahub repo
         if: ${{ env.IMAGE_TAG }}
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.DATAHUB_CREATE_PR }}
+          token: ${{ steps.app-token.outputs.token }}
           fetch-depth: 0
           repository: 'berkeley-dsep-infra/datahub'
           sparse-checkout: |
@@ -104,11 +111,11 @@ jobs:
             sed -i -e "s,${IMAGE}:${old_hash},${IMAGE}:${new_hash},g" ${deployment}
             echo "Updated ${deployment} with new image tag ${new_hash}"
           done
-
+  
       - name: Create feature branch, add, commit, push changes and open a pull request
         if: ${{ env.IMAGE_TAG }}
-        env:
-          GH_TOKEN: ${{ secrets.DATAHUB_CREATE_PR }}
+        env: 
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
           CHANGED_FILES=$(git status --porcelain -uno | awk '{print $2}')
           git diff