diff --git a/.github/workflows/release-automation.yaml b/.github/workflows/release-automation.yaml index 7e71b4d88..39b679d06 100644 --- a/.github/workflows/release-automation.yaml +++ b/.github/workflows/release-automation.yaml @@ -24,7 +24,7 @@ on: permissions: contents: write - issues: write + actions: write defaults: run: @@ -80,7 +80,7 @@ jobs: with: fetch-depth: 0 ref: main - token: ${{ secrets.HEDERA_BOT_TOKEN }} + token: ${{ secrets.GH_ACCESS_TOKEN }} - name: Import GPG Key id: gpg_importer @@ -89,8 +89,8 @@ jobs: git_commit_gpgsign: true git_tag_gpgsign: true git_user_signingkey: true - gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} - passphrase: ${{ secrets.GPG_PASSPHRASE }} + gpg_private_key: ${{ secrets.GPG_KEY_CONTENTS }} + passphrase: ${{ secrets.GPG_KEY_PASSPHRASE }} - name: Install JDK uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 @@ -128,7 +128,7 @@ jobs: with: milestone_name: ${{ steps.version_parser.outputs.release }} env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GH_ACCESS_TOKEN }} - name: Create Release Notes if: ${{ steps.milestone.outputs.milestone_id != '' }} @@ -158,7 +158,7 @@ jobs: omitBody: ${{ steps.milestone.outputs.milestone_id == '' }} prerelease: ${{ steps.version_parser.outputs.prerelease != '' }} tag: ${{ env.RELEASE_TAG }} - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.GH_ACCESS_TOKEN }} create_pr: name: Create PR @@ -178,7 +178,9 @@ jobs: - name: Checkout Repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: + fetch-depth: 0 ref: main + token: ${{ secrets.GH_ACCESS_TOKEN }} - name: Import GPG Key id: gpg_importer @@ -187,8 +189,8 @@ jobs: git_commit_gpgsign: true git_tag_gpgsign: true git_user_signingkey: true - gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }} - passphrase: ${{ secrets.GPG_PASSPHRASE }} + gpg_private_key: ${{ secrets.GPG_KEY_CONTENTS }} + passphrase: ${{ secrets.GPG_KEY_PASSPHRASE }} - name: Install JDK uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 @@ -218,4 +220,4 @@ jobs: delete-branch: true signoff: true title: ${{ needs.release.outputs.pr_title }} - token: ${{ secrets.HEDERA_BOT_TOKEN }} + token: ${{ secrets.GH_ACCESS_TOKEN }}