Avoid reviewing own PRs by auto-merging with bot token

.github/workflows/pr-test-lint.yml

@@ -135,13 +135,19 @@ jobs:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
           filterOutClosed: true
           filterOutDraft: true
-      - name: Approve and merge a PR
-        run: |
-          gh pr review ${{ steps.pr.outputs.number }} --approve
-          gh pr merge ${{ steps.pr.outputs.number }} --squash --merge
-        env:
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-
+      # fetch a token for the mondoo-mergebot app
+      - name: Generate token
+        id: generate-token
+        uses: tibdex/github-app-token@v1
+        with:
+          app_id: ${{ secrets.MONDOO_MERGEBOT_APP_ID }}
+          private_key: ${{ secrets.MONDOO_MERGEBOT_APP_PRIVATE_KEY }}
+      # automerge using bot token
+      - uses: peter-evans/enable-pull-request-automerge@v3
+        with:
+          pull-request-number: ${{ github.event.pull_request.number }}
+          merge-method: squash
+          token: ${{ steps.generate-token.outputs.token }} 
   event_file:
     name: "Store event file"
     runs-on: ubuntu-latest