Merge pull request #8 from major-technology/j/7

Workflow and releaser

Author: jasonzbao

.github/workflows/release.yml

@@ -15,6 +15,14 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version: "1.24.2"
+      # Mint short-lived token for the tap repo
+      - id: app-token
+        uses: tibdex/github-app-token@v2
+        with:
+          app_id: ${{ secrets.APP_ID }}
+          private_key: ${{ secrets.APP_PRIVATE_KEY }}
+          # Optionally restrict to just the tap repo
+          repositories: 'homebrew-tap'
       - name: GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:
@@ -23,3 +31,4 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          HOMEBREW_TAP_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}

.goreleaser.yaml

@@ -32,6 +32,7 @@ brews:                     # <- still deprecated but works
     repository:
       owner: major-technology
       name: homebrew-tap
+      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
     commit_author:
       name: goreleaser
       email: goreleaser@users.noreply.github.com