Files
openclaw/.github/actions/create-generated-pr-tokens/action.yml
Peter Steinberger a2f845e6c8 fix: control UI locale PRs fail to arm auto-merge (#110809)
* fix(ci): grant locale auto-merge token contents access

* style(ci): format locale workflow guards
2026-07-18 17:45:27 +01:00

52 lines
2.0 KiB
YAML

name: Create generated PR tokens
description: Mint repo-scoped GitHub App tokens for generated branch and pull request publication.
inputs:
contents-client-id:
description: GitHub App client id with contents write access.
required: true
contents-private-key:
description: GitHub App private key with contents write access.
required: true
pull-request-client-id:
description: GitHub App client id with pull-request write access.
required: true
pull-request-private-key:
description: GitHub App private key with pull-request write access.
required: true
pull-request-contents-permission:
description: Optional contents permission for pull-request operations that require repository write access.
required: false
outputs:
contents-token:
description: Repository-scoped contents-write installation token.
value: ${{ steps.contents-token.outputs.token }}
pull-request-token:
description: Repository-scoped pull-request-write installation token.
value: ${{ steps.pull-request-token.outputs.token }}
runs:
using: composite
steps:
- name: Create generated branch app token
id: contents-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
with:
client-id: ${{ inputs.contents-client-id }}
private-key: ${{ inputs.contents-private-key }}
owner: ${{ github.repository_owner }}
repositories: ${{ github.event.repository.name }}
permission-contents: write
- name: Create generated PR app token
id: pull-request-token
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
with:
client-id: ${{ inputs.pull-request-client-id }}
private-key: ${{ inputs.pull-request-private-key }}
owner: ${{ github.repository_owner }}
repositories: ${{ github.event.repository.name }}
permission-contents: ${{ inputs.pull-request-contents-permission }}
permission-pull-requests: write