ci: add GH token with sign permissions (#347)

Signed-off-by: Ian Cardoso <ian.cardoso@zup.com.br>
ZupIT · Oct 1, 2021 · 9070bf4 · 9070bf4
1 parent 5e2460d
commit 9070bf4
Showing 1 changed file with 3 additions and 8 deletions.
diff --git a/.github/workflows/new-release.yml b/.github/workflows/new-release.yml
@@ -34,6 +34,7 @@ jobs:
         uses: actions/checkout@v2
         with:
           fetch-depth: 0
+          token: ${{ secrets.HORUSEC_PUSH_TOKEN }}
 
       - name: Set up Go
         uses: actions/setup-go@v2
@@ -133,14 +134,8 @@ jobs:
       - name: Push tag
         run: |
           git push origin ${{ steps.updated-version.outputs.version }}
-      - name: Get release branch name
-        if: github.event.inputs.releaseType != 'p'
-        run: |
-          version=${{ steps.updated-version.outputs.version }}
-          echo "RELEASE_BRANCH=$(echo release/${version%.*})" >> $GITHUB_ENV
       - name: Create release branch
         if: github.event.inputs.releaseType != 'p'
         run: |
-          git push origin main
-          git branch ${{ env.RELEASE_BRANCH }}
-          git push origin ${{ env.RELEASE_BRANCH }}
+          git branch ${{ steps.updated-version.outputs.releaseBranchName }}
+          git push origin ${{ steps.updated-version.outputs.releaseBranchName }}