tracking-exposed / trex

youtube & tiktok analysis + youchoose recommendation custmizer. backend, extensions, and tooling
https://docs.tracking.exposed
GNU Affero General Public License v3.0
52 stars 15 forks source link

[workspace] Refresh GH token before CI release step #836

Open ascariandrea opened 1 year ago

ascariandrea commented 1 year ago

The last CI run for publishing the GH release has failed due to the expired token.

I suggest to add a "refresh token" step before running the release process, so to keep the secret rotating and prevent such error.

It seems to be easily solvable with this action

uses: hmanzur/actions-set-secret@v2.0.0
with:
  name: 'RELEASE_TOKEN'
  value: 
  repository: 'tracking-exposed/trex'
  token: ${{ secrets.RELEASE_TOKEN }}
  org: true
  visibility: 'all'