CalvinBackup/HackBrowserData
1
0
Fork 0
mirror of https://github.com/moonD4rk/HackBrowserData.git synced 2026-08-15 23:50:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

ci: unify bot automation on the shared GitHub App (#619)

Browse Source 
* ci: unify bot automation on the shared GitHub App

Point contributors.yml at the shared app via client-id (was the old hackbrowserdata-bot app), and replace the long-lived Homebrew PAT with a short-lived app token scoped to homebrew-tap for the formula push.

* ci: mint homebrew-tap token only in release mode
This commit is contained in:
Roger
2026-07-06 00:16:39 +08:00
committed by GitHub
parent eb98596d01
commit 6502d5ee14
3 changed files with 15 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/contributors.yml
+2 -2
View File
@@ -18,8 +18,8 @@ jobs:
uses: actions/create-github-app-token@v3
id: app-token
with:
app-id: ${{ secrets.HACKBROWSERDATA_BOT_APP_ID }}
private-key: ${{ secrets.HACKBROWSERDATA_BOT_PRIVATE_KEY }}
client-id: ${{ vars.MOOND4RK_CI_RELEASE_APP_CLIENT_ID }}
private-key: ${{ secrets.MOOND4RK_CI_RELEASE_APP_PRIVATE_KEY }}
- name: Checkout
uses: actions/checkout@v7
.github/workflows/release.yml
+11 -2
View File
@@ -51,6 +51,16 @@ jobs:
- name: Build ABE payload
run: make payload
- name: Mint homebrew-tap token
id: tap-token
if: inputs.mode == 'release'
uses: actions/create-github-app-token@v3
with:
client-id: ${{ vars.MOOND4RK_CI_RELEASE_APP_CLIENT_ID }}
private-key: ${{ secrets.MOOND4RK_CI_RELEASE_APP_PRIVATE_KEY }}
owner: moonD4rk
repositories: homebrew-tap
- name: Create and push tag
if: inputs.mode == 'release'
env:
@@ -75,7 +85,6 @@ jobs:
args: release --snapshot --clean
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
- name: Run GoReleaser (release)
if: inputs.mode == 'release'
@@ -85,7 +94,7 @@ jobs:
args: release --clean ${{ inputs.draft && '--draft' || '' }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.tap-token.outputs.token }}
- name: Upload snapshot artifacts
if: inputs.mode == 'snapshot'