From 9753363e0cc7ffdd6564f4d58357a219995274f5 Mon Sep 17 00:00:00 2001
From: Darren Temple <darren.temple@theodi.org>
Date: Tue, 15 Apr 2025 16:30:13 +0100
Subject: [PATCH] chore: Replace personal access token with GitHub App Token

---
 .github/workflows/publish-to-npm.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish-to-npm.yml b/.github/workflows/publish-to-npm.yml
index ce9bcdb..22d5c1a 100644
--- a/.github/workflows/publish-to-npm.yml
+++ b/.github/workflows/publish-to-npm.yml
@@ -10,10 +10,16 @@ jobs:
     if: ${{ !contains(github.event.head_commit.author.email, 'hello@openactive.io') }}
 
     steps:
+    - name: Generate GitHub App Token
+      uses: actions/create-github-app-token@v1
+      id: generate-token
+      with:
+        app-id: ${{ secrets.GH_APP_ID }}
+        private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
     - name: Checkout
       uses: actions/checkout@v2
       with:
-        token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}
+        token: ${{ steps.generate-token.outputs.token }}
     - name: Identify
       run: |
         git config user.name OpenActive Bot