Merge pull request #22 from structured-world/fix/#21-semantic-release-app-token

polaz · web-flow · commit 2fd91fc7b709 · 2026-01-19T13:34:20.000+02:00
fix(ci): use GitHub App token for semantic-release
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
@@ -130,11 +130,18 @@ jobs:
       new-release-version: ${{ steps.semantic.outputs.new-release-version }}
 
     steps:
+      - name: Generate release token
+        uses: tibdex/github-app-token@v2
+        id: app-token
+        with:
+          app_id: ${{ secrets.RELEASER_APP_ID }}
+          private_key: ${{ secrets.RELEASER_APP_PRIVATE_KEY }}
+
       - name: Checkout code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -159,7 +166,7 @@ jobs:
       - name: Run semantic-release
         id: semantic
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           npx semantic-release
