From 6108041ce4c5ccb341637a4f4bcddb6fb4ee18ea Mon Sep 17 00:00:00 2001
From: blam <ben@blam.sh>
Date: Tue, 18 Jan 2022 14:29:16 +0100
Subject: [PATCH] chore: added get-workflow-token script

Signed-off-by: blam <ben@blam.sh>
---
 .github/workflows/goalie.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/goalie.yaml b/.github/workflows/goalie.yaml
index 2303039c7f..90c84e671d 100644
--- a/.github/workflows/goalie.yaml
+++ b/.github/workflows/goalie.yaml
@@ -12,6 +12,12 @@ jobs:
   label:
     runs-on: ubuntu-latest
     steps:
+      - name: Get Token
+        id: get_workflow_token
+        uses: peter-murray/workflow-application-token-action@v1
+        with:
+          application_id: ${{ secrets.BACKSTAGE_WORKFLOW_MEMBER_READ_APP_ID }}
+          application_private_key: ${{ secrets.BACKSTAGE_WORKFLOW_MEMBER_READ_PRIVATE_KEY }}
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with:
@@ -21,7 +27,7 @@ jobs:
       - uses: actions/github-script@v5
         id: get-all-group-members
         with:
-          github-token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }}
+          github-token: ${{ steps.get_workflow_token.outputs.token }}
           script: |
             // Get all teams and their respective members
             const {data: teams} = await github.request('GET /orgs/{org}/teams', {