From 539fb8fbf1b740651964d606dfdb0b3058fc9487 Mon Sep 17 00:00:00 2001 From: Timur Olzhabayev Date: Fri, 2 May 2025 17:04:42 +0200 Subject: [PATCH] moving all to vault --- .github/workflows/do-release.yml | 4 ++-- .github/workflows/release.yml | 15 +++++++++++---- 2 files changed, 13 insertions(+), 6 deletions(-) diff --git a/.github/workflows/do-release.yml b/.github/workflows/do-release.yml index 7bfb043b..6ab4ce9b 100644 --- a/.github/workflows/do-release.yml +++ b/.github/workflows/do-release.yml @@ -41,8 +41,8 @@ jobs: - name: Setup Git run: | - git config user.name 'grafana-delivery-bot[bot]' - git config user.email '132647405+grafana-delivery-bot[bot]@users.noreply.github.com' + git config user.name 'grafana-plugins-platform-bot[bot]' + git config user.email '144369747+grafana-plugins-platform-bot[bot]@users.noreply.github.com' - name: bump version run: npm version ${INPUT_VERSION} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6286dd41..f2e71b90 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,13 +22,20 @@ jobs: with: go-version-file: go.mod check-latest: true + + - id: get-secrets + uses: grafana/shared-workflows/actions/get-vault-secrets@28361cdb22223e5f1e34358c86c20908e7248760 # get-vault-secrets-v1.1.0 + with: + repo_secrets: | + GITHUB_APP_ID=plugins-platform-bot-app:app_id + GITHUB_APP_PRIVATE_KEY=plugins-platform-bot-app:app_pem - name: Generate token id: generate_token - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a + uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2 with: - app_id: ${{ secrets.APP_ID }} - private_key: ${{ secrets.APP_PEM }} + app-id: ${{ env.GITHUB_APP_ID }} + private-key: ${{ env.GITHUB_APP_PRIVATE_KEY }} - uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6.3.0 with: @@ -48,7 +55,7 @@ jobs: - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 with: - node-version: "20" + node-version: "22" registry-url: "https://registry.npmjs.org" - run: npm install - run: npm publish