authorgravatar for julius0216@outlook.comJulius Marminge <julius0216@outlook.com> 2026-04-17 16:52:56-07:00
committergravatar for noreply@github.comGitHub <noreply@github.com> 2026-04-17 16:52:56-07:00
log9df3c640210fecccb58f7fbc735f81ca0ee011bd
treeae937cf93e7f7cce59e3da395c2ee20996498ab5
parent8ac57f79444ede3f43b8bfbf8455bca23fa50624
signature Signed by PGP key B5690EEEBB952194

Use GitHub App token for release uploads (#2149)

1 files changed, 10 insertions(+), 0 deletions(-)

.github/workflows/release.yml+10
...@@ -393,6 +393,14 @@ jobs:...@@ -393,6 +393,14 @@ jobs:
393 runs-on: ubuntu-24.04 # blacksmith-8vcpu-ubuntu-2404393 runs-on: ubuntu-24.04 # blacksmith-8vcpu-ubuntu-2404
394 timeout-minutes: 10394 timeout-minutes: 10
395 steps:395 steps:
396 - id: app_token
397 name: Mint release app token
398 uses: actions/create-github-app-token@v2
399 with:
400 app-id: ${{ secrets.RELEASE_APP_ID }}
401 private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
402 owner: ${{ github.repository_owner }}
403
396 - name: Checkout404 - name: Checkout
397 uses: actions/checkout@v6405 uses: actions/checkout@v6
398 with:406 with:
...@@ -477,6 +485,7 @@ jobs:...@@ -477,6 +485,7 @@ jobs:
477 release-assets/*.blockmap485 release-assets/*.blockmap
478 release-assets/*.yml486 release-assets/*.yml
479 fail_on_unmatched_files: true487 fail_on_unmatched_files: true
488 token: ${{ steps.app_token.outputs.token }}
480489
481 - name: Publish first release490 - name: Publish first release
482 if: needs.preflight.outputs.previous_tag == ''491 if: needs.preflight.outputs.previous_tag == ''
...@@ -496,6 +505,7 @@ jobs:...@@ -496,6 +505,7 @@ jobs:
496 release-assets/*.blockmap505 release-assets/*.blockmap
497 release-assets/*.yml506 release-assets/*.yml
498 fail_on_unmatched_files: true507 fail_on_unmatched_files: true
508 token: ${{ steps.app_token.outputs.token }}
499509
500 finalize:510 finalize:
501 name: Finalize release511 name: Finalize release