Merge pull request #4730 from OAI/main-sync

sync workflows: use app token to trigger PR event

Author: handrews

.github/workflows/sync-dev-to-vX.Y-dev.yaml

@@ -16,6 +16,13 @@ jobs:
   sync-branches:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate access token
+        id: generate-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.OAI_SPEC_PUBLISHER_APPID }}
+          private-key: ${{ secrets.OAI_SPEC_PUBLISHER_PRIVATE_KEY }}
+    
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
@@ -41,5 +48,5 @@ jobs:
               --body "Merge \`$HEAD\` into \`$BASE\`."
           done
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
           HEAD: dev

.github/workflows/sync-main-to-dev.yaml

@@ -16,6 +16,13 @@ jobs:
   sync-branch:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate access token
+        id: generate-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.OAI_SPEC_PUBLISHER_APPID }}
+          private-key: ${{ secrets.OAI_SPEC_PUBLISHER_PRIVATE_KEY }}
+
       - name: Checkout repository
         uses: actions/checkout@v4
 
@@ -35,6 +42,6 @@ jobs:
             --title "$BASE: update from $HEAD" \
             --body "Merge \`$HEAD\` into \`$BASE\`."
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
           HEAD: main
           BASE: dev