From 6d3f36f885fbfef286ca29538df13a0d698c9f4a Mon Sep 17 00:00:00 2001
From: Nicholas openSUSE Software Engineer <nicholas.paolillo@suse.com>
Date: Sat, 11 Jan 2025 13:12:07 -0300
Subject: [PATCH] [dev-v2.10] testing new strategy (#4952)

---
 .github/workflows/auto-bump.yaml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/auto-bump.yaml b/.github/workflows/auto-bump.yaml
index a659aea495..4808a83689 100644
--- a/.github/workflows/auto-bump.yaml
+++ b/.github/workflows/auto-bump.yaml
@@ -42,6 +42,19 @@ jobs:
             exit 1
           fi
 
+      - name: Read App Secrets
+        uses: rancher-eio/read-vault-secrets@main
+        with:
+          secrets: |
+            secret/data/github/repo/${{ github.repository }}/github/app-credentials appId | APP_ID ;
+            secret/data/github/repo/${{ github.repository }}/github/app-credentials privateKey | PRIVATE_KEY
+      - name: Create App Token
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ env.APP_ID }}
+          private-key: ${{ env.PRIVATE_KEY }}
+
       - name: Configure Git for Commit
         run: |
           git config --global user.name "GitHub Actions"
@@ -54,6 +67,7 @@ jobs:
           git push origin ${{ env.BRANCH }}
 
       - name: Create Pull Request
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
-          gh auth login --with-token < ${{ secrets.GITHUB_TOKEN }}
           gh pr create --base ${{ env.BRANCH }} --head "auto-bump_${{ env.CHART }}" --title "[${{ env.BRANCH }}] auto bump: ${{ env.CHART }}" --body $'This PR auto-bumps the chart version for ${{ env.CHART }}.\n---\n## Review Checklist: \n- [ ] CRDs\n- [ ] templates folder if any\n- [ ] Version'
\ No newline at end of file