From 586b0fb137d430e2b826f3814723dd61c8d82ff1 Mon Sep 17 00:00:00 2001
From: Ariel Valentin <arielvalentin@users.noreply.github.com>
Date: Tue, 2 Jan 2024 14:41:46 -0600
Subject: [PATCH] ci: Use Org OTel Bot Token (#789)

The Org Level OTel Bot Token likely a PAT, which will allow PRs opened by GH actions to trigger
subsequent actions workflows.

This will fix the problem where CI jobs do not run when the bot opens a PR for release requests.
---
 .github/workflows/release-hook-on-closed.yml | 2 +-
 .github/workflows/release-hook-on-push.yml   | 2 +-
 .github/workflows/release-perform.yml        | 2 +-
 .github/workflows/release-please.yaml        | 2 ++
 .github/workflows/release-request.yml        | 2 +-
 .github/workflows/release-retry.yml          | 2 +-
 .github/workflows/stale.yaml                 | 2 +-
 7 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/release-hook-on-closed.yml b/.github/workflows/release-hook-on-closed.yml
index 6a80f4146..decb16703 100644
--- a/.github/workflows/release-hook-on-closed.yml
+++ b/.github/workflows/release-hook-on-closed.yml
@@ -21,7 +21,7 @@ jobs:
         run: "gem install --no-document toys -v 0.15.3"
       - name: Process release request
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           toys release _onclosed --verbose \
             "--enable-releases=${{ secrets.ENABLE_RELEASES }}" \
diff --git a/.github/workflows/release-hook-on-push.yml b/.github/workflows/release-hook-on-push.yml
index d3a85043d..c7a5c0b92 100644
--- a/.github/workflows/release-hook-on-push.yml
+++ b/.github/workflows/release-hook-on-push.yml
@@ -22,7 +22,7 @@ jobs:
         run: "gem install --no-document toys -v 0.15.3"
       - name: Update open releases
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           toys release _onpush --verbose \
             < /dev/null
diff --git a/.github/workflows/release-perform.yml b/.github/workflows/release-perform.yml
index 60ebeaee5..44e888c21 100644
--- a/.github/workflows/release-perform.yml
+++ b/.github/workflows/release-perform.yml
@@ -31,7 +31,7 @@ jobs:
         run: "gem install --no-document toys -v 0.15.3"
       - name: Perform release
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           toys release perform --yes --verbose \
             "--enable-releases=${{ secrets.ENABLE_RELEASES }}" \
diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml
index a05c3b71a..38b327ccc 100644
--- a/.github/workflows/release-please.yaml
+++ b/.github/workflows/release-please.yaml
@@ -18,6 +18,8 @@ jobs:
     steps:
       - uses: google-github-actions/release-please-action@cc61a07e2da466bebbc19b3a7dd01d6aecb20d1e
         id: release
+        with:
+          token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
 
     outputs:
       paths_released: ${{ steps.release.outputs.paths_released }}
diff --git a/.github/workflows/release-request.yml b/.github/workflows/release-request.yml
index 00997a9ba..72396aecc 100644
--- a/.github/workflows/release-request.yml
+++ b/.github/workflows/release-request.yml
@@ -25,7 +25,7 @@ jobs:
         run: "gem install --no-document toys -v 0.15.3"
       - name: Open release pull request
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           toys release request --yes --verbose \
             "--gems=${{ github.event.inputs.gems }}" \
diff --git a/.github/workflows/release-retry.yml b/.github/workflows/release-retry.yml
index 381987aec..c6fffa61d 100644
--- a/.github/workflows/release-retry.yml
+++ b/.github/workflows/release-retry.yml
@@ -28,7 +28,7 @@ jobs:
         run: "gem install --no-document toys -v 0.15.3"
       - name: Retry release
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           toys release retry --yes --verbose \
             "--enable-releases=${{ secrets.ENABLE_RELEASES }}" \
diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
index 5357eb690..82b7e5c62 100644
--- a/.github/workflows/stale.yaml
+++ b/.github/workflows/stale.yaml
@@ -13,7 +13,7 @@ jobs:
     - uses: actions/stale@v9
       name: Clean up stale issues and PRs
       with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
+        repo-token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         stale-issue-message: "👋 This issue has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the `keep` label to hold stale off permanently, or do nothing. If you do nothing this issue will be closed eventually by the stale bot."
         stale-issue-label: "stale"
         exempt-issue-labels: "keep"