sync/ci: Assorted fixes (#710)

- add `NO_BUILD_SETUP` before calling Envoy ci - use app auth to push changes Signed-off-by: Ryan Northey <[email protected]>
envoyproxy · Jun 4, 2023 · 678d460 · 678d460
1 parent f1ec428
commit 678d460
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/envoy-sync.yaml b/.github/workflows/envoy-sync.yaml
@@ -21,12 +21,19 @@ jobs:
           || github.actor == 'sync-envoy[bot]'
       }}
     steps:
+    - id: appauth
+      uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0
+      with:
+        key: ${{ secrets.ENVOY_CI_UPDATE_BOT_KEY }}
+        app_id: ${{ secrets.ENVOY_CI_UPDATE_APP_ID }}
+
     # Checkout the repo
     - name: 'Checkout Repository'
       uses: actions/checkout@v3
       with:
         ref: main
         fetch-depth: 0
+        token: ${{ steps.appauth.outputs.value }}
 
     # Checkout the Envoy repo
     - name: 'Checkout Repository'
@@ -41,3 +48,4 @@ jobs:
     - run: ci/sync_envoy.sh
       env:
         ENVOY_SRC_DIR: ../envoy
+        NO_BUILD_SETUP: 1