Switch pipeline to use GitHub App

preparingforexams · Aug 30, 2024 · 6465fe4 · 6465fe4
1 parent 82f7abf
commit 6465fe4
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 2 deletions.
diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
@@ -25,6 +25,8 @@ jobs:
       - uses: asdf-vm/actions/install@v3
       - run: terraform init -backend=false
       - run: terraform validate
+        env:
+          GITHUB_APP_PEM_FILE: ${{ secrets.GH_APP_PEM_FILE }}
 
   plan:
     runs-on: ubuntu-latest
@@ -34,7 +36,7 @@ jobs:
     env:
       DOPPLER_TOKEN: ${{ secrets.TERRAFORM_DOPPLER_TOKEN }}
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_SA_JSON }}
-      GITHUB_TOKEN: ${{ secrets.TERRAFORM_GITHUB_TOKEN }}
+      GITHUB_APP_PEM_FILE: ${{ secrets.GH_APP_PEM_FILE }}
     steps:
       - uses: actions/checkout@v4
       - uses: asdf-vm/actions/install@v3
@@ -49,7 +51,7 @@ jobs:
     env:
       DOPPLER_TOKEN: ${{ secrets.TERRAFORM_DOPPLER_TOKEN }}
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_SA_JSON }}
-      GITHUB_TOKEN: ${{ secrets.TERRAFORM_GITHUB_TOKEN }}
+      GITHUB_APP_PEM_FILE: ${{ secrets.GH_APP_PEM_FILE }}
     steps:
       - uses: actions/checkout@v4
       - uses: asdf-vm/actions/install@v3

diff --git a/main.tf b/main.tf
@@ -21,10 +21,19 @@ terraform {
   }
 }
 
+locals {
+  gh_app_id = "Iv23lic3F7QIQ3ouYfNO"
+}
+
 provider "doppler" {}
 
 provider "github" {
   owner = "preparingforexams"
+  app_auth {
+    id              = local.gh_app_id
+    pem_file        = null
+    installation_id = "54329043"
+  }
 }
 
 provider "google" {