From 233c4e0b8cb816bac7807846c1fa7601f17b27ed Mon Sep 17 00:00:00 2001
From: Antoine Cotten <hello@acotten.com>
Date: Tue, 2 Nov 2021 10:45:37 +0100
Subject: [PATCH] ci: Use token from GitHub App in auto-update workflow

---
 .github/workflows/update.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index ed34252..a22cfc6 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -82,10 +82,19 @@ jobs:
               echo '::set-output name=has_changes::true'
           fi
 
+      - name: Impersonate update bot
+        uses: tibdex/github-app-token@v1
+        id: generate-token
+        if: steps.update-files.outputs.has_changes
+        with:
+          app_id: ${{ secrets.APP_ID }}
+          private_key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Send pull request to update to new version
         if: steps.update-files.outputs.has_changes
         uses: peter-evans/create-pull-request@v3
         with:
+          token: ${{ steps.generate-token.outputs.token }}
           branch: update/${{ matrix.branch }}
           commit-message: Update to v${{ fromJson(steps.get-latest-release.outputs.result).version }}
           title: Update to v${{ fromJson(steps.get-latest-release.outputs.result).version }}