authorgravatar for julius0216@outlook.comJulius Marminge <julius0216@outlook.com> 2026-04-17 16:52:56-07:00
committergravatar for noreply@github.comGitHub <noreply@github.com> 2026-04-17 16:52:56-07:00
log9df3c640210fecccb58f7fbc735f81ca0ee011bd
treeae937cf93e7f7cce59e3da395c2ee20996498ab5
parent8ac57f79444ede3f43b8bfbf8455bca23fa50624
signature Signed by PGP key B5690EEEBB952194

Use GitHub App token for release uploads (#2149)

1 files changed, 10 insertions(+), 0 deletions(-)

.github/workflows/release.yml+10
......@@ -393,6 +393,14 @@ jobs:
393393 runs-on: ubuntu-24.04 # blacksmith-8vcpu-ubuntu-2404
394394 timeout-minutes: 10
395395 steps:
396 - id: app_token
397 name: Mint release app token
398 uses: actions/create-github-app-token@v2
399 with:
400 app-id: ${{ secrets.RELEASE_APP_ID }}
401 private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
402 owner: ${{ github.repository_owner }}
403
396404 - name: Checkout
397405 uses: actions/checkout@v6
398406 with:
......@@ -477,6 +485,7 @@ jobs:
477485 release-assets/*.blockmap
478486 release-assets/*.yml
479487 fail_on_unmatched_files: true
488 token: ${{ steps.app_token.outputs.token }}
480489
481490 - name: Publish first release
482491 if: needs.preflight.outputs.previous_tag == ''
......@@ -496,6 +505,7 @@ jobs:
496505 release-assets/*.blockmap
497506 release-assets/*.yml
498507 fail_on_unmatched_files: true
508 token: ${{ steps.app_token.outputs.token }}
499509
500510 finalize:
501511 name: Finalize release