ci: obtain write token using octo sts

FriendsOfShopware · Jul 17, 2024 · 51c43e3 · 51c43e3
1 parent ae36c5e
commit 51c43e3
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -38,6 +38,12 @@ jobs:
       - name: Install Syft
         uses: anchore/sbom-action/[email protected]
 
+      - uses: octo-sts/[email protected]
+        id: sts-homebrew
+        with:
+          scope: FriendsOfShopware/homebrew-tap
+          identity: release
+
       - name: Login into Github Docker Registry
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
@@ -51,7 +57,7 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.sts-homebrew.outputs.token }}
           AUR_KEY: ${{ secrets.AUR_KEY }}
 
       - name: Install Cloudsmith CLI