pass pk

Author: j2fw

.github/workflows/pr-approval-check.yml

@@ -10,10 +10,17 @@ jobs:
   approval:
     runs-on: ubuntu-latest
     steps:
+      - name: Mint installation token
+        id: app-token
+        uses: actions/create-github-app-token@<pin-a-commit-sha>
+        with:
+          app-id: ${{ secrets.PR_APPROVAL_CHECK_APP_ID }}
+          private-key: ${{ secrets.PR_APPROVAL_CHECK }}
+
       - name: Require Product Eng approval
         uses: trufflesecurity/pr-approval-check@main   # <— just the repo + tag
         with:
           org: trufflesecurity
           approver_team: product-eng
-          github_token: ${{ secrets.PR_APPROVAL_CHECK }}
+          github_token: ${{ steps.app-token.outputs.token }}