fix(ci-cd): use token-bureau

SocialGouv · Jan 7, 2025 · 0c9dba1 · 0c9dba1
1 parent c32d179
commit 0c9dba1
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -5,15 +5,25 @@ on:
   push:
     branches: [master, alpha, beta, next]
 
+permissions:
+  id-token: write  # Required for OIDC token generation
+
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
 
+    - name: Get GitHub App Token
+      id: token
+      uses: SocialGouv/token-bureau@main
+      with:
+        token-bureau-url: http://token-bureau.fabrique.social.gouv.fr
+        audience: socialgouv
+
     - uses: socialgouv/workflows/actions/semantic-release@v1
       with:
         author-name: ${{ secrets.SOCIALGROOVYBOT_NAME }}
         author-email: ${{ secrets.SOCIALGROOVYBOT_EMAIL }}
-        github-token: ${{ secrets.SOCIALGROOVYBOT_BOTO_PAT }}
+        github-token: ${{ steps.token.outputs.token }}