use github app installation token for device repository cloning

This is required for cloning private submodules - as the default behaviour means the token is scoped only to the repository the workflow is running on

Change-type: patch
Signed-off-by: Ryan Cooke <[email protected]>

.github/workflows/yocto-build-deploy.yml

@@ -232,6 +232,8 @@ jobs:
 
       # Generate an app installation token that has access to
       # all repos where the app is installed (usually the whole org)
+      # Owner input to make token valid for all repositories in the org
+      # This behvaiour is required for private submodules
       # https://github.com/actions/create-github-app-token
       - name: Create GitHub App installation token
         uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
@@ -240,6 +242,7 @@ jobs:
         with:
           app-id: ${{ vars.FLOWZONE_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
 
       # Generate another app token for the balena-io organization
       # so we can checkout private contracts
@@ -1077,13 +1080,16 @@ jobs:
 
     steps:
       # https://github.com/actions/create-github-app-token
+      # Owner input to make token valid for all repositories in the org
+      # This behvaiour is required for private submodules
       - name: Create GitHub App installation token
         uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
         id: app-token
         if: vars.FLOWZONE_APP_ID != ''
         with:
           app-id: ${{ vars.FLOWZONE_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
 
       # Generate another app token for the balena-io organization
       # so we can checkout private contracts