From b9b3939fabd11707a6d3a5ade98d00ff55ba591d Mon Sep 17 00:00:00 2001
From: Erik Godding Boye <egboye@gmail.com>
Date: Mon, 2 Oct 2023 16:36:38 +0200
Subject: [PATCH] ci: try GHCR cleanup with Statnett BOT token (#606)

---
 .github/workflows/clean-ghcr.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/clean-ghcr.yaml b/.github/workflows/clean-ghcr.yaml
index 5126c556..7a812eb6 100644
--- a/.github/workflows/clean-ghcr.yaml
+++ b/.github/workflows/clean-ghcr.yaml
@@ -14,6 +14,11 @@ jobs:
       packages: write # for snok/container-retention-policy to delete images
     runs-on: ubuntu-latest
     steps:
+      - id: token
+        uses: tibdex/github-app-token@v1
+        with:
+          app_id: ${{ secrets.STATNETT_BOT_APP_ID }}
+          private_key: ${{ secrets.STATNETT_BOT_PRIVATE_KEY }}
       - name: Delete untagged container images older than a week
         uses: snok/container-retention-policy@04c70fd030033036d69c0057e0d125bf25820544 # v2.1.2
         with:
@@ -22,4 +27,4 @@ jobs:
           account-type: org
           org-name: statnett
           untagged-only: true
-          token: ${{ secrets.BOT_PAT }}
+          token: ${{ steps.token.outputs.token }}