update-profiles.yml

name: Update upstream content

on: 
  workflow_dispatch:

jobs:
  update:
    name: Run update
    runs-on: ubuntu-latest
    steps:
      - name: Generate app token
        uses: tibdex/github-app-token@v2.1.0
        id: get_installation_token
        with: 
          app_id: ${{ secrets.APP_ID }}
          private_key: ${{ secrets.PRIVATE_KEY }}
          permissions: >-
            {"contents": "write", "pull_requests": "write"}
      - name: Clone
        uses: actions/checkout@v4
        with:
          token: ${{ steps.get_installation_token.outputs.token }}
      - name: Update from upstream repo
        uses: RedHatProductSecurity/trestle-bot/actions/sync-upstreams@v0.6.0
        with:
          branch: "sync-upstream-${{ github.run_id }}"
          target_branch: "main"
          commit_message: "Updates content from oscal-profiles repository [skip ci]"
          pull_request_title: "Updates content from oscal-profiles repository"
          commit_user_name: "trestle-bot[bot]"
          commit_user_email: "136850459+trestle-bot[bot]@users.noreply.github.com"
          github_token: ${{ steps.get_installation_token.outputs.token }}
          sources: |
            https://github.com/RedHatProductSecurity/oscal-profiles@main