From 1683afb3bc16cf03f67a5593d552bc55efb7790e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dani=C3=ABlle=20Huisman?= <danielle@huisman.me>
Date: Tue, 24 Jun 2025 10:37:13 +0200
Subject: [PATCH] ci: use GitHub app token for upstream workflow (#100)

---
 .github/workflows/upstream.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/upstream.yml b/.github/workflows/upstream.yml
index 6c6db63..789d306 100644
--- a/.github/workflows/upstream.yml
+++ b/.github/workflows/upstream.yml
@@ -15,6 +15,13 @@ jobs:
         runs-on: ubuntu-latest
 
         steps:
+            - name: Generate GitHub App token
+              id: app-token
+              uses: actions/create-github-app-token@v2
+              with:
+                  app-id: ${{ secrets.APP_ID }}
+                  private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
             - name: Checkout
               uses: actions/checkout@v4
 
@@ -38,8 +45,8 @@ jobs:
             - name: Check for upstream releases
               run: cargo run -p scripts --bin upstream
               env:
-                  GITHUB_ACTOR: ${{ env.GITHUB_ACTOR }}
-                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+                  GITHUB_ACTOR: rust-for-web[bot]
+                  GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
                   GIT_USER_NAME: rust-for-web[bot]
                   GIT_USER_EMAIL: 191031261+rust-for-web[bot]@users.noreply.github.com
                   RUST_LOG: upstream=info