Skip to content

ci: Use GitHub App token for CI workflow #687

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Aaron ("AJ") Steers (aaronsteers) merged 6 commits into from
Jun 2, 2025
Merged

ci: Use GitHub App token for CI workflow #687

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
6aeee20
ci: use github app token
aaronsteers Jun 2, 2025
10029ef
use explicit owner
aaronsteers Jun 2, 2025
977e380
re-order steps
aaronsteers Jun 2, 2025
0a5e109
fix job name
aaronsteers Jun 2, 2025
62c8f54
remove test trigger
aaronsteers Jun 2, 2025
d64b126
Update .github/workflows/test-pr-command.yml
aaronsteers Jun 2, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 14 additions & 3 deletions .github/workflows/test-pr-command.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,10 +25,19 @@ permissions:

jobs:
start-workflow:
name: Append 'Starting' Comment
name: Start Workflow
runs-on: ubuntu-latest
steps:

- name: Authenticate as GitHub App
uses: actions/create-github-app-token@v1
id: get-app-token
with:
owner: "airbytehq"
repositories: "PyAirbyte"
app-id: ${{ secrets.OCTAVIA_BOT_APP_ID }}
private-key: ${{ secrets.OCTAVIA_BOT_PRIVATE_KEY }}

- name: Create URL to the run output
id: vars
run: echo "run-url=https://github.com/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" >> $GITHUB_OUTPUT
Expand All @@ -49,12 +58,14 @@ jobs:
uses: cloudposse-github-actions/get-pr@v2.0.0
with:
id: ${{ inputs.pr }}

outputs:
source-repo: ${{ fromJSON(steps.pr-info.outputs.json).head.repo.full_name }}
source-branch: ${{ fromJSON(steps.pr-info.outputs.json).head.ref }}
commit-sha: ${{ fromJSON(steps.pr-info.outputs.json).head.sha }}
pr-number: ${{ steps.pr-info.outputs.number }}
pr-title: ${{ steps.pr-info.outputs.title }}
gh-app-token: ${{ steps.get-app-token.outputs.token }}

# This is copied from the `python_pytest.yml` file.
# Only the first two steps of the job are different, and they check out the PR's branch.
Expand Down Expand Up @@ -98,7 +109,7 @@ jobs:
repo: "airbytehq/airbyte" # Post to the Airbyte repo, not the fork
sha: ${{ needs.start-workflow.outputs.commit-sha }}
status: in_progress
token: ${{ secrets.GH_PAT_MAINTENANCE_OCTAVIA }}
token: ${{ needs.start-workflow.outputs.gh-app-token }}

# Same as the `python_pytest.yml` file:

Expand Down Expand Up @@ -147,7 +158,7 @@ jobs:
sha: ${{ needs.start-workflow.outputs.commit-sha }}
status: completed
conclusion: ${{ job.status }}
token: ${{ secrets.GH_PAT_MAINTENANCE_OCTAVIA }}
token: ${{ needs.start-workflow.outputs.gh-app-token }}

log-success-comment:
name: Append 'Success' Comment
Expand Down
Loading