From 48488274539f8374f9506f9cfc9205bb1a2081bf Mon Sep 17 00:00:00 2001
From: nestor-colt-cko <nestor.colt@checkout.com>
Date: Tue, 1 Sep 2026 21:49:14 +0200
Subject: [PATCH] feat(POP-1687): mint semver tokens from po-public-write App

---
 .github/workflows/semver.yaml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/semver.yaml b/.github/workflows/semver.yaml
index de010a9..c459579 100644
--- a/.github/workflows/semver.yaml
+++ b/.github/workflows/semver.yaml
@@ -15,8 +15,17 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Mint App token
+        id: app-token
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 #v2
+        with:
+          app-id: ${{ vars.PO_PUBLIC_WRITE_APP_ID }}
+          private-key: ${{ secrets.PO_PUBLIC_WRITE_APP_KEY }}
+          owner: processout
+          repositories: pg-upgrade-data-check
+
       - uses: go-semantic-release/action@v1.24.1
         id: semrel
         with:
-          github-token: ${{ secrets.PO_GITHUB_TOKEN }}
+          github-token: ${{ steps.app-token.outputs.token }}
           force-bump-patch-version: true