Used KSB app

Author: adamlui

.github/workflows/sync-ai-personas-releases-to-project-repo.yml

@@ -12,7 +12,16 @@ jobs:
       contents: read
     env:
       REPO_SYNC_PAT: ${{ secrets.REPO_SYNC_PAT }}
+
     steps:
+      - name: Generate KSB token
+        id: ksb-token
+        uses: actions/create-github-app-token@v3.0.0
+        with:
+          app-id: ${{ secrets.KSB_APP_ID }}
+          private-key: ${{ secrets.KSB_PRIVATE_KEY }}
+          owner: KudoAI
+
       - name: Sync release to KudoAI/ai-personas
         run: |
           RELEASE_TITLE="${{ github.event.release.name }}"
@@ -58,7 +67,7 @@ jobs:
               printf '{"tag_name": "%s","name": "%s","body": "%s"}' \
                 "$TARGET_RELEASE_TAG" "$TARGET_RELEASE_TITLE" "$RELEASE_NOTES")
             create_release_resp=$(
-              curl -s -S -X POST -H "Authorization: token $REPO_SYNC_PAT" \
+              curl -s -S -X POST -H "Authorization: Bearer ${{ steps.ksb-token.outputs.token }}" \
                    -H "Content-Type: application/json" -d "$create_release_payload" "$create_release_url")
             if echo "$create_release_resp" | grep -q '"message"' ; then
               echo "ERROR: Failed to create release: $create_release_resp"
@@ -72,13 +81,13 @@ jobs:
               printf '{"name": "%s","body": "%s"}' \
                 "$TARGET_RELEASE_TITLE" "$RELEASE_NOTES")
             patch_release_resp=$(
-              curl -s -S -X PATCH -H "Authorization: token $REPO_SYNC_PAT" \
+              curl -s -S -X PATCH -H "Authorization: Bearer ${{ steps.ksb-token.outputs.token }}" \
                    -H "Content-Type: application/json" -d "$update_release_payload" "$update_release_url")
             if echo "$patch_release_resp" | grep -q '"message"' ; then
               echo "ERROR: Failed to update release: $patch_release_resp"
               exit 1
             fi
-            get_release_resp=$(curl -s -S -H "Authorization: token $REPO_SYNC_PAT" \
+            get_release_resp=$(curl -s -S -H "Authorization: Bearer ${{ steps.ksb-token.outputs.token }}" \
               "https://api.github.com/repos/KudoAI/ai-personas/releases/tags/$TARGET_RELEASE_TAG")
             upload_url=$(echo "$get_release_resp" | sed -nE 's|.*"upload_url": "(.*)".*|\1|p' | sed 's|{.*}||')
           fi