name: "Generate a token for Rekku"

on:
  workflow_call:
    secrets:
      REKKU_PRIVATE_KEY:
        required: false

jobs:
  Generate-a-token-for-Rekku:
    runs-on: ubuntu-latest

    outputs:
      rekku_token: ${{ steps.generate-rekku-token.outputs.token }}

    steps:

      - name: Generate a token for Rekku
        id: generate-rekku-token
        uses: actions/create-github-app-token@v1
        with:
          app-id: ${{ vars.REKKU_APP_ID }}
          private-key: ${{ secrets.REKKU_PRIVATE_KEY }}
          owner: "RetroDECK"
          skip-token-revoke: true