From 515e58e3a64fc661de927220d8badb4dce846ed2 Mon Sep 17 00:00:00 2001
From: iorate <682043+iorate@users.noreply.github.com>
Date: Sat, 7 Mar 2026 23:22:48 +0900
Subject: [PATCH] use GitHub App for pull requests

---
 .github/workflows/update-searxng-instances.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/update-searxng-instances.yml b/.github/workflows/update-searxng-instances.yml
index d93b12f..d5e0645 100644
--- a/.github/workflows/update-searxng-instances.yml
+++ b/.github/workflows/update-searxng-instances.yml
@@ -16,8 +16,7 @@ jobs:
     runs-on: ubuntu-latest
 
     permissions:
-      contents: write
-      pull-requests: write
+      contents: read
 
     steps:
       - name: Checkout
@@ -29,9 +28,17 @@ jobs:
       - name: Update SearXNG instances
         run: pnpm update-searxng-instances
 
+      - name: Generate token for pull request
+        id: generate-token
+        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        with:
+          app-id: ${{ vars.PULL_REQUESTS_APP_ID }}
+          private-key: ${{ secrets.PULL_REQUESTS_PRIVATE_KEY }}
+
       - name: Create pull request
         uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
         with:
+          token: ${{ steps.generate-token.outputs.token }}
           commit-message: "searxng: update instances"
           branch: update-searxng-instances
           title: Update SearXNG instances