ci: use actions-github-app-token

peaceiris · Oct 23, 2022 · 2bef62f · 2bef62f
1 parent 2c04d6b
commit 2bef62f
Showing 1 changed file with 14 additions and 5 deletions.
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
@@ -1,13 +1,22 @@
 name: "Pull Request Labeler"
-# https://github.com/actions/labeler
 
 on:
-  - pull_request_target
+  pull_request_target:
 
 jobs:
   triage:
     runs-on: ubuntu-22.04
+    timeout-minutes: 1
+    permissions: {}
     steps:
-    - uses: actions/labeler@v4
-      with:
-        repo-token: "${{ secrets.GH_PAT }}"
+      # https://github.com/peaceiris/actions-github-app-token
+      - uses: peaceiris/[email protected]
+        id: app
+        with:
+          app_id: ${{ secrets.GH_APP_ID }}
+          private_key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
+      # https://github.com/actions/labeler
+      - uses: actions/labeler@v4
+        with:
+          repo-token: "${{ steps.app.outputs.token }}"