Merge pull request #4472 from openziti/fix-triage-workflow

Fix triage workflow

.github/workflows/check-needs-reviews.yml

@@ -11,12 +11,21 @@ permissions: {}
 jobs:
   add-to-project:
     runs-on: ubuntu-latest
+    if: >-
+      github.actor != 'dependabot[bot]' &&
+      !contains(fromJson('["andrewpmartinez", "CLBRITTON2", "dovholuknf", "ekoby", "emoscardini", "michaelquigley", "mikegorman-nf", "plorenz", "scareything", "smilindave26"]'), github.actor)
     steps:
-      - name: Check author and add to project
-        if: >-
-          github.actor != 'dependabot[bot]' &&
-          !contains(fromJson('["andrewpmartinez", "dovholuknf","ekoby","michaelquigley", "mikegorman-nf", "plorenz", "emoscardini","scarey","smilindave26"]'), github.actor)
+      - name: Mint project token
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        with:
+          client-id: ${{ vars.TRIAGE_APP_CLIENT_ID }}
+          private-key: ${{ secrets.TRIAGE_APP_PRIVATE_KEY }}
+          owner: openziti
+          permission-organization-projects: write
+
+      - name: Add to project
         uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd  # v2.0.0
         with:
           project-url: https://github.com/orgs/openziti/projects/38
-          github-token: ${{ secrets.GH_CI_KEY }}
+          github-token: ${{ steps.app-token.outputs.token }}