[ACS-12108] Introduce signed commits for ACA workflows (#5273)

* [ACS-12108] Introduce signed commits for ACA workflows

* [ACS-12108] CR fixes

* [ACS-12108] CR fix

* [ACS-12108] Migrate PR creation to create-pull-request

* [ACS-12108] Use read-only token
This commit is contained in:
Michal Kinas
2026-07-10 13:29:04 +02:00
committed by GitHub
parent c53bf094f1
commit 357c61bf3c
2 changed files with 54 additions and 63 deletions
+11 -1
View File
@@ -7,8 +7,18 @@ jobs:
pull-from-crowdin:
runs-on: ubuntu-latest
steps:
- name: Generate app token
id: app-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
with:
client-id: ${{ vars.GH_APP_ENGINEERING_CONTRIB_CLIENT_ID }}
private-key: ${{ secrets.GH_APP_ENGINEERING_CONTRIB_PRIVATE_KEY }}
permission-contents: write
permission-pull-requests: write
- name: Checkout
uses: actions/checkout@v7
with:
token: ${{ steps.app-token.outputs.token }}
- name: Pull translations from Crowdin
uses: crowdin/github-action@52aa776766211d83d975df51f3b9c53c2f8ba35f # v2.16.3
with:
@@ -22,5 +32,5 @@ jobs:
github_user_email: ${{ vars.HXPS_GIT_EMAIL }}
gpg_private_key: ${{ secrets.HXPS_GIT_COMMIT_SIGNING_PRIVATE_KEY }}
env:
GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
CROWDIN_TOKEN: ${{ secrets.CROWDIN_TRANSLATIONS_TOKEN }}