Fighting with git, creds and gh actions

Author: marcingrzejszczak

src/main/java/io/micrometer/release/train/DependencyVerifier.java

@@ -105,7 +105,7 @@ private void assertDependencyDiff(Status status, Set<Dependency> diff) {
 
     private Status dependabotUpdateStatus(File clonedRepo, String orgRepository) {
         String githubServerTime = getGitHubServerTime();
-        triggerDependabotCheck(clonedRepo);
+        triggerDependabotCheck(orgRepository, clonedRepo);
         waitForDependabotJobsToFinish(orgRepository, githubServerTime);
         return waitForDependabotPrsToFinish(githubServerTime);
     }
@@ -162,7 +162,7 @@ private String getGitHubServerTime() {
         return serverTime;
     }
 
-    private void triggerDependabotCheck(File clonedRepo) {
+    private void triggerDependabotCheck(String orgRepository, File clonedRepo) {
         log.info("Will trigger a Dependabot check...");
         try {
             String filePath = ".github/dependabot.yml";
@@ -179,7 +179,10 @@ private void triggerDependabotCheck(File clonedRepo) {
                 log.info("Added trigger comment to dependabot.yml");
             }
             Files.writeString(path, fileContent);
+            String githubToken = ghToken();
             ProcessRunner branchProcessRunner = processRunnerForBranch(clonedRepo);
+            branchProcessRunner.run("git", "remote", "set-url", "origin",
+                    "https://x-access-token:" + githubToken + "@github.com/" + orgRepository + ".git");
             branchProcessRunner.run("git", "config", "user.name", "GitHub Action");
             branchProcessRunner.run("git", "config", "user.email", "[email protected]");
             branchProcessRunner.run("git", "add", filePath);
@@ -194,6 +197,10 @@ private void triggerDependabotCheck(File clonedRepo) {
         log.info("Triggered Dependabot check");
     }
 
+    String ghToken() {
+        return System.getenv("GH_TOKEN");
+    }
+
     ProcessRunner processRunnerForBranch(File clonedRepo) {
         return new ProcessRunner(this.processRunner, clonedRepo);
     }

src/test/java/io/micrometer/release/train/DependencyVerifierTests.java

@@ -74,6 +74,11 @@ File clonedDir(String branch) {
             }
         }
 
+        @Override
+        String ghToken() {
+            return "1234567890";
+        }
+
         @Override
         ProcessRunner processRunnerForBranch(File clonedRepo) {
             return processRunner;
@@ -103,6 +108,9 @@ void should_receive_updated_dependabot_status() throws IOException {
 
         InOrder inOrder = Mockito.inOrder(processRunner);
         inOrder.verify(processRunner).run("gh", "api", "/", "--include");
+        inOrder.verify(processRunner)
+            .run("git", "remote", "set-url", "origin",
+                    "https://x-access-token:[email protected]/micrometer-metrics/micrometer.git");
         inOrder.verify(processRunner).run("git", "config", "user.name", "GitHub Action");
         inOrder.verify(processRunner).run("git", "config", "user.email", "[email protected]");
         inOrder.verify(processRunner).run("git", "add", ".github/dependabot.yml");