fix(ci-cd): use token-bureau

SocialGouv · Jan 7, 2025 · 7f50ab0 · 7f50ab0
1 parent e79aa7b
commit 7f50ab0
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -4,14 +4,23 @@ on:
   push:
     branches: [master, alpha]
 
+permissions:
+  id-token: write  # Required for OIDC token generation
+
 jobs:
   build:
     runs-on: ubuntu-latest
 
     steps:
+      - name: Get GitHub App Token
+        id: token
+        uses: SocialGouv/token-bureau@main
+        with:
+          token-bureau-url: https://token-bureau.fabrique.social.gouv.fr
+          audience: socialgouv
       - uses: actions/checkout@v2
         with:
-          token: ${{ secrets.SOCIALGROOVYBOT_BOTO_PAT }}
+          token: ${{ steps.token.outputs.token }}
       - name: Set up Node.js
         uses: actions/setup-node@v3
         with: