Replace repo-level token with GH App (#5147)

* Replace repo-level token with GH App * Also specify repository
mondoohq · Jan 31, 2025 · a52394f · a52394f
1 parent 89095e4
commit a52394f
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.github/workflows/providers.yaml b/.github/workflows/providers.yaml
@@ -188,10 +188,19 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ ! inputs.skip_publish }}
     steps:
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.MONDOO_CHECKOUT_APP_ID }}
+          private-key: ${{ secrets.MONDOO_CHECKOUT_APP_PRIVATE_KEY }}
+          owner: mondoohq
+          repositories: |
+            releasr
       - name: Trigger Reindex of releases.mondoo.com
         uses: peter-evans/repository-dispatch@v3
         with:
-          token: ${{ secrets.RELEASR_ACTION_TOKEN }}
+          token: ${{ steps.generate-token.outputs.token }}
           repository: "mondoohq/releasr"
           event-type: reindex
           client-payload: '{ }'