From 33c99f6cc9268eea2aad72deef1955a0f0317027 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Thu, 13 Mar 2025 11:04:24 +0100
Subject: [PATCH] ci/update-vendor-hash: use github app token

otherwise auto-merge doesn't work
---
 .github/workflows/update-vendor-hash.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/update-vendor-hash.yml b/.github/workflows/update-vendor-hash.yml
index dafec28..1293885 100644
--- a/.github/workflows/update-vendor-hash.yml
+++ b/.github/workflows/update-vendor-hash.yml
@@ -1,18 +1,20 @@
 name: Update vendorHash
 on: pull_request
-
-permissions:
-  contents: write
-
 jobs:
   dependabot:
     runs-on: ubuntu-latest
     if: ${{ github.actor == 'dependabot[bot]' }}
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.CI_APP_ID }}
+          private-key: ${{ secrets.CI_APP_PRIVATE_KEY }}
       - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
       - name: Install Nix
         uses: cachix/install-nix-action@v31
         with: