Update GitHub Actions to use GitHub App token

Author: goruha

.github/workflows/test-helmfile-raw-default-kube-version.yml

@@ -34,6 +34,7 @@ jobs:
 
   test:
     runs-on: ubuntu-latest
+    environment: terratest
     continue-on-error: true
     needs: [setup]
     services:
@@ -70,6 +71,13 @@ jobs:
           ## Use localhost to connect localstack because the commands runs not in a container
           AWS_ENDPOINT_OVERRIDE: http://localhost:4566
 
+      - uses: actions/create-github-app-token@v2
+        id: github-app
+        with:
+          app-id: ${{ vars.BOT_GITHUB_APP_ID }}
+          private-key: ${{ secrets.BOT_GITHUB_APP_PRIVATE_KEY }}
+          owner: 'cloudposse-tests'
+
       - uses: ./action
         id: current
         with:
@@ -80,7 +88,7 @@ jobs:
           path: ./action/test/helmfile/helmfile.yaml
           application: test-app
           ssm-path: platform/default
-          github-pat: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}
+          github-pat: ${{ steps.github-app.outputs.token }}
           image: nginx
           image-tag: ${{ needs.setup.outputs.random }}
           repository: ${{ github.repository }}
@@ -101,6 +109,7 @@ jobs:
 
   assert:
     runs-on: ubuntu-latest
+    environment: terratest
     needs: [setup, test]
     steps:
       - uses: nick-fields/assert-action@v1
@@ -119,12 +128,19 @@ jobs:
           actual: "${{ needs.test.outputs.sha }}"
           comparison: notEqual
 
+      - uses: actions/create-github-app-token@v2
+        id: github-app
+        with:
+          app-id: ${{ vars.BOT_GITHUB_APP_ID }}
+          private-key: ${{ secrets.BOT_GITHUB_APP_PRIVATE_KEY }}
+          owner: 'cloudposse-tests'
+
       - name: Checkout Argo Configuration
         uses: actions/checkout@v3
         with:
           repository: cloudposse-tests/argocd-deploy-non-prod-test
           ref: ${{ needs.test.outputs.sha }}
-          token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}
+          token: ${{ steps.github-app.outputs.token }}
           path: ./assert
 
       - name: Get Image