Make auto-update run as the app (#829)

* Make auto-update run as the app

Signed-off-by: Matty Widdop <18513864+MattyTheHacker@users.noreply.github.com>

* Update pr-auto-update.yml

Signed-off-by: Matty Widdop <18513864+MattyTheHacker@users.noreply.github.com>

* test client secret

Signed-off-by: Matty Widdop <18513864+MattyTheHacker@users.noreply.github.com>

* Revert "test client secret"

This reverts commit ac4d1c3.

* Update pr-auto-update.yml

Signed-off-by: Matty Widdop <18513864+MattyTheHacker@users.noreply.github.com>

* Update pr-auto-update.yml

Signed-off-by: Matty Widdop <18513864+MattyTheHacker@users.noreply.github.com>

---------

Signed-off-by: Matty Widdop <18513864+MattyTheHacker@users.noreply.github.com>

Author: MattyTheHacker

.github/workflows/pr-auto-update.yml

@@ -10,9 +10,16 @@ jobs:
       pull-requests: write
       contents: write
     steps:
+      - name: Generate Access Token
+        uses: actions/create-github-app-token@v2
+        id: generate-token
+        with:
+          app-id: ${{ vars.PR_AUTO_UPDATE_CLIENT_ID }}
+          private-key: ${{ secrets.PR_AUTO_UPDATE_PRIVATE_KEY }}
+
       - uses: CSSUoB/pr-auto-updater@v2.1.2
         env:
-          GITHUB_TOKEN: '${{ secrets.PR_AUTO_UPDATE_TOKEN }}'
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
           PR_FILTER: 'labelled'
           PR_LABELS: 'sync'
           MERGE_CONFLICT_ACTION: 'label'