Skip to content

Commit 38dc336

Browse files
committed
ci(steps): Handle push into protected branch
1 parent 3df8aec commit 38dc336

File tree

1 file changed

+24
-1
lines changed

1 file changed

+24
-1
lines changed

.github/workflows/ci.yaml

Lines changed: 24 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,5 @@
11
name: CI Pipeline
2+
run-name: ${{ github.actor }} is automatically publishing
23

34
on:
45
push:
@@ -53,6 +54,28 @@ jobs:
5354
pull-requests: write
5455
runs-on: ubuntu-latest
5556
steps:
57+
- name: 'Generate token'
58+
id: GENERATE_TOKEN
59+
uses: actions/create-github-app-token@v2
60+
with:
61+
app-id: ${{ secrets.BOT_APP_ID }}
62+
private-key: ${{ secrets.BOT_PRIVATE_KEY }}
63+
64+
- name: Get GitHub App User ID
65+
id: get-user-id
66+
run: echo "user-id=$(gh api "/users/${{ steps.GENERATE_TOKEN.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
67+
env:
68+
GH_TOKEN: ${{ steps.GENERATE_TOKEN.outputs.token }}
69+
70+
- name: Set global username and email
71+
run: |
72+
git config --global user.name '${{ steps.GENERATE_TOKEN.outputs.app-slug }}[bot]'
73+
git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.GENERATE_TOKEN.outputs.app-slug }}[bot]@users.noreply.github.com'
74+
75+
- name: Debug auth
76+
run: |
77+
curl -L -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{ steps.GENERATE_TOKEN.outputs.token }}" -H "X-GitHub-Api-Version: 2022-11-28" https://api.github.com/user
78+
5679
- name: Checkout
5780
uses: actions/checkout@v4
5881

@@ -80,6 +103,6 @@ jobs:
80103

81104
- name: Run Semantic Release
82105
env:
83-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
106+
GITHUB_TOKEN: ${{ steps.GENERATE_TOKEN.outputs.token }}
84107
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
85108
run: npx semantic-release

0 commit comments

Comments
 (0)