github-actions: use GH app to manage the projects (#1660)

elastic · Oct 7, 2024 · 3c843c1 · 3c843c1
1 parent dc6553e
commit 3c843c1
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/.github/workflows/addToAPMProject.yml b/.github/workflows/addToAPMProject.yml
@@ -11,6 +11,16 @@ jobs:
     runs-on: ubuntu-latest
     name: Assign issues to APM Project for the Server Team
     steps:
+      - name: Get token
+        id: get_token
+        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        with:
+          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permissions: >-
+            {
+              "repository_projects": "write"
+            }
       - uses: octokit/[email protected]
         id: add_to_project
         with:
@@ -28,7 +38,7 @@ jobs:
           contentid: ${{ github.event.issue.node_id }}
         env:
           PROJECT_ID: "PVT_kwDOAGc3Zs0VSg"
-          GITHUB_TOKEN: ${{ secrets.APM_TECH_USER_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}
       - uses: octokit/[email protected]
         id: label_team
         with:
@@ -51,4 +61,4 @@ jobs:
           value: "6c538d8a"
         env:
           PROJECT_ID: "PVT_kwDOAGc3Zs0VSg"
-          GITHUB_TOKEN: ${{ secrets.APM_TECH_USER_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.get_token.outputs.token }}