diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml index 826686cae9f..eb9760da9c3 100644 --- a/.github/workflows/integration-tests.yml +++ b/.github/workflows/integration-tests.yml @@ -10,7 +10,9 @@ on: jobs: integration-test-v2: uses: ./.github/workflows/integration-tests-v2.yml - secrets: inherit + secrets: + FIREBOLT_CLIENT_ID_STG_NEW_IDN: ${{ secrets.FIREBOLT_CLIENT_ID_STG_NEW_IDN }} + FIREBOLT_CLIENT_SECRET_STG_NEW_IDN: ${{ secrets.FIREBOLT_CLIENT_SECRET_STG_NEW_IDN }} integration-test-core: uses: ./.github/workflows/integration-tests-core.yml report-test-results: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 94f90f1f044..8a972d18f49 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,7 +13,9 @@ on: jobs: integration-tests: uses: ./.github/workflows/integration-tests.yml - secrets: inherit + secrets: + FIREBOLT_CLIENT_ID_STG_NEW_IDN: ${{ secrets.FIREBOLT_CLIENT_ID_STG_NEW_IDN }} + FIREBOLT_CLIENT_SECRET_STG_NEW_IDN: ${{ secrets.FIREBOLT_CLIENT_SECRET_STG_NEW_IDN }} publish: runs-on: ubuntu-latest @@ -21,11 +23,20 @@ jobs: contents: write needs: integration-tests steps: + - name: Create GitHub App token + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + id: app-token + with: + client-id: ${{ secrets.GH_APP_FB_DB_CI_WRITER_CLIENT_ID }} + private-key: ${{ secrets.GH_APP_FB_DB_CI_WRITER_APP_KEY_PEM }} + permission-contents: write + - name: Check out code uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - token: ${{ secrets.RELEASE_PAT }} + token: ${{ steps.app-token.outputs.token }} + persist-credentials: true # The release action pushes the version commit and tag. - name: 'Publish action' uses: firebolt-db/action-python-release@0cb5692fd39a782bce366e9120055d999bc8824b # main