From 65e95401c6f56fdebe501f5979630838184899cc Mon Sep 17 00:00:00 2001
From: Ben Miner <bminer@scope3.com>
Date: Tue, 24 Mar 2026 11:00:52 -0500
Subject: [PATCH] chore(ci): use scope3-wizard github app for release changeset
 prs + merges

---
 .github/workflows/release.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6977043..ba3a917 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,11 +15,18 @@ jobs:
       contents: read
       id-token: write
     steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ vars.SCOPE3_WIZARD_APP_ID }}
+          private-key: ${{ secrets.SCOPE3_WIZARD_APP_PRIVATE_KEY }}
+
       - name: Checkout code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.PAT_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
 
       # setup-node used directly: internal action doesn't support registry-url
       - name: Setup Node.js
@@ -43,4 +50,4 @@ jobs:
           commit: 'chore: version packages'
           title: 'chore: version packages'
         env:
-          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}