From cbcb617a69a52299b8b39e92b0e2544caaebc0b8 Mon Sep 17 00:00:00 2001
From: rodrigozhou <rodrigo.zhou@gmail.com>
Date: Wed, 29 May 2024 16:17:35 -0500
Subject: [PATCH] [GHA] Replace token with CICD app

---
 .github/workflows/update-proto.yml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/update-proto.yml b/.github/workflows/update-proto.yml
index eb33be7..684119c 100644
--- a/.github/workflows/update-proto.yml
+++ b/.github/workflows/update-proto.yml
@@ -17,9 +17,6 @@ on:
         description: "Commit message"
         required: true
 
-permissions:
-  contents: write
-
 jobs:
   sync:
     name: "Update proto"
@@ -30,10 +27,17 @@ jobs:
         shell: bash
 
     steps:
+      - name: Generate token
+        id: generate_token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.TEMPORAL_CICD_APP_ID }}
+          private-key: ${{ secrets.TEMPORAL_CICD_PRIVATE_KEY }}
+
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ github.generate_token.outputs.token }}
           persist-credentials: true
           ref: ${{ github.event.inputs.branch }}
           submodules: true