feat(IDX): use new github app (#4080)

This PR moves any workflows that generate PRs to a new app and require using a new environment.
dfinity · Feb 24, 2025 · 01e65de · 01e65de
1 parent af1e51b
commit 01e65de
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/.github/workflows/container-base-images.yml b/.github/workflows/container-base-images.yml
@@ -106,15 +106,16 @@ jobs:
     name: Update Reference Files PR
     runs-on: ubuntu-latest
     timeout-minutes: 10
+    environment: CREATE_PR
     needs: [build-base-image]
     if: ${{ github.ref_name == 'master' }}
     steps:
       - name: Create GitHub App Token
         uses: actions/create-github-app-token@v1
         id: app-token
         with:
-          app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
-          private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
+          app-id: ${{ vars.PR_CREATION_BOT_APP_ID }}
+          private-key: ${{ secrets.PR_CREATION_BOT_PRIVATE_KEY }}
 
       - name: Checkout
         uses: actions/checkout@v4

diff --git a/.github/workflows/update-mainnet-revisions.yaml b/.github/workflows/update-mainnet-revisions.yaml
@@ -12,13 +12,14 @@ defaults:
 jobs:
   update-ic-versions-file:
     runs-on: ubuntu-latest
+    environment: CREATE_PR
     steps:
       - name: Create GitHub App Token
         uses: actions/create-github-app-token@v1
         id: app-token
         with:
-          app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
-          private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
+          app-id: ${{ vars.PR_CREATION_BOT_APP_ID }}
+          private-key: ${{ secrets.PR_CREATION_BOT_PRIVATE_KEY }}
 
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -37,6 +38,7 @@ jobs:
   update-nervous-system-wasms:
     runs-on:
       labels: dind-small
+    environment: CREATE_PR
     container:
       image: ghcr.io/dfinity/ic-build@sha256:908c9b2abe0647cd54a2485117c263b0dae4a8aba8f25bc073813b09be9b1d59
       options: >-
@@ -46,8 +48,8 @@ jobs:
         uses: actions/create-github-app-token@v1
         id: app-token
         with:
-          app-id: ${{ vars.PR_AUTOMATION_BOT_PUBLIC_APP_ID }}
-          private-key: ${{ secrets.PR_AUTOMATION_BOT_PUBLIC_PRIVATE_KEY }}
+          app-id: ${{ vars.PR_CREATION_BOT_PRIVATE_KEY }}
+          private-key: ${{ secrets.PR_CREATION_BOT_APP_ID }}
 
       - name: Checkout repository
         uses: actions/checkout@v4