From ce17571d1f00ff991505df0bef68b5b049ed2558 Mon Sep 17 00:00:00 2001
From: Justin Kromlinger <hashworks@archlinux.org>
Date: Sun, 17 Oct 2021 16:22:55 +0200
Subject: [PATCH] Set private token of release-cli call to project token

As suggested by @klausenbusk, this ensures that the releases are created
by the project bot/user instead of the schedule-owner.
---
 .gitlab-ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 3963e07..34ff7b4 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -258,6 +258,7 @@ release:
       # But it doesn't appear that those downloads are public. I consider this a bug and hopefully it's fixed in a future version!
       echo "Creating release"
       release-cli create --name "Release ${BUILD_VERSION}" --description "Release ${BUILD_VERSION}" \
+      --private-token "${GITLAB_PROJECT_TOKEN}" \
       --tag-name v${BUILD_VERSION} --ref "releases" \
       --assets-link "{\"name\":\"base-${BUILD_VERSION}.tar.xz\",\"url\":\"${base_url}\"}" \
       --assets-link "{\"name\":\"base-${BUILD_VERSION}.tar.xz.SHA256\",\"url\":\"${base_sha_url}\"}" \