From 7924d7f139fc8c413b6a3cf8785c7a67b54e78b8 Mon Sep 17 00:00:00 2001 From: Ralf Handl Date: Sun, 22 Dec 2024 22:42:33 +0100 Subject: [PATCH 1/3] Use app-generated access token --- .github/workflows/schema-publish.yaml | 19 +++++++++++++------ 1 file changed, 13 insertions(+), 6 deletions(-) diff --git a/.github/workflows/schema-publish.yaml b/.github/workflows/schema-publish.yaml index 964a8ae..966f31a 100644 --- a/.github/workflows/schema-publish.yaml +++ b/.github/workflows/schema-publish.yaml @@ -18,6 +18,15 @@ jobs: runs-on: ubuntu-latest steps: + - name: Generate access token + id: generate-token + uses: actions/create-github-app-token@v1 + with: + app-id: ${{ secrets.OAI_SPEC_PUBLISHER_APPID }} + private-key: ${{ secrets.OAI_SPEC_PUBLISHER_PRIVATE_KEY }} + owner: OAI + repositories: OpenAPI-Specification + - uses: actions/checkout@v4 # checkout main branch with: fetch-depth: 0 @@ -31,7 +40,7 @@ jobs: - uses: actions/checkout@v4 # checkout gh-pages branch with: - token: ${{ secrets.OAS_REPO_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} repository: OAI/OpenAPI-Specification ref: gh-pages path: deploy @@ -42,16 +51,14 @@ jobs: - name: Create Pull Request uses: peter-evans/create-pull-request@v7 with: - # A personal access token is required to push changes to the repository. - # This token needs to be refreshed regularly and stored in the repository secrets. - token: ${{ secrets.OAS_REPO_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} branch: publish-arazzo-schema-iteration base: gh-pages delete-branch: true path: deploy labels: Housekeeping,Schema - reviewers: darrelmiller,webron,earth2marsh,lornajane,mikekistler,miqui,handrews - title: Publish Arazzo Schema Iterations + reviewers: darrelmiller,webron,earth2marsh,lornajane,mikekistler,miqui,handrews,ralfhandl + title: Arazzo - Publish Schema Iterations commit-message: New Arazzo schema iterations signoff: true body: | From 46a8c775aa408138ba9c69494a676fb0f43d0ef4 Mon Sep 17 00:00:00 2001 From: Ralf Handl Date: Sun, 22 Dec 2024 22:51:55 +0100 Subject: [PATCH 2/3] Use app-generated access token --- .github/workflows/respec.yaml | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/.github/workflows/respec.yaml b/.github/workflows/respec.yaml index b132ec4..a5d6cd6 100644 --- a/.github/workflows/respec.yaml +++ b/.github/workflows/respec.yaml @@ -22,6 +22,15 @@ jobs: runs-on: ubuntu-latest steps: + - name: Generate access token + id: generate-token + uses: actions/create-github-app-token@v1 + with: + app-id: ${{ secrets.OAI_SPEC_PUBLISHER_APPID }} + private-key: ${{ secrets.OAI_SPEC_PUBLISHER_PRIVATE_KEY }} + owner: OAI + repositories: OpenAPI-Specification + - uses: actions/checkout@v4 # checkout main branch with: fetch-depth: 0 @@ -35,7 +44,7 @@ jobs: - uses: actions/checkout@v4 # checkout gh-pages branch with: - token: ${{ secrets.OAS_REPO_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} repository: OAI/OpenAPI-Specification ref: gh-pages path: deploy @@ -48,13 +57,13 @@ jobs: - name: Create Pull Request uses: peter-evans/create-pull-request@v6 with: - token: ${{ secrets.OAS_REPO_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} branch: update-arazzo-respec-version base: gh-pages delete-branch: true path: deploy labels: Housekeeping - reviewers: darrelmiller,webron,earth2marsh,webron,lornajane,mikekistler,miqui,handrews,karenetheridge # ralfhandl + reviewers: darrelmiller,webron,earth2marsh,webron,lornajane,mikekistler,miqui,handrews,karenetheridge,ralfhandl title: Arazzo - Update ReSpec-rendered specification versions commit-message: Update ReSpec-rendered specification versions signoff: true From a32e5934cb8368fd720cffd0c1e46f9ebe0edbd0 Mon Sep 17 00:00:00 2001 From: Ralf Handl Date: Mon, 23 Dec 2024 10:51:21 +0100 Subject: [PATCH 3/3] Use working ubuntu --- .github/workflows/respec.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/respec.yaml b/.github/workflows/respec.yaml index a5d6cd6..ee1cae6 100644 --- a/.github/workflows/respec.yaml +++ b/.github/workflows/respec.yaml @@ -19,7 +19,7 @@ on: jobs: respec: - runs-on: ubuntu-latest + runs-on: ubuntu-22.04 steps: - name: Generate access token