From a32425368ba211e26b2c7ff820dfc60626252d64 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Zolt=C3=A1n=20Bedi?= <zoltan.bedi@gmail.com>
Date: Thu, 16 Jan 2025 10:45:59 +0100
Subject: [PATCH] Fix add to project workflow (#1113)

---
 .github/workflows/add-to-project.yml | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml
index 478d2ae0..9b743788 100644
--- a/.github/workflows/add-to-project.yml
+++ b/.github/workflows/add-to-project.yml
@@ -3,12 +3,29 @@ on:
   issues:
     types:
       - opened
+
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   add-to-project:
     name: Add issue to project
     runs-on: ubuntu-latest
     steps:
+      - id: get-secrets
+        uses: grafana/shared-workflows/actions/get-vault-secrets@main
+        with:
+          repo_secrets: |
+            GITHUB_APP_ID=grafana-oss-big-tent:app-id
+            GITHUB_APP_PRIVATE_KEY=grafana-oss-big-tent:private-key
+      - name: Generate a token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GITHUB_APP_ID }}
+          private-key: ${{ secrets.GITHUB_APP_PRIVATE_KEY }}
       - uses: actions/add-to-project@main
         with:
           project-url: https://github.com/orgs/grafana/projects/457
-          github-token: ${{ secrets.ISSUE_COMMANDS_TOKEN }}
+          github-token: ${{ steps.generate-token.outputs.token }}