Use new org secret (#7759)

.github/workflows/backport.yml

@@ -28,7 +28,7 @@ jobs:
         env:
           NUMBER: ${{ github.event.inputs.number }}
           # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           commit=$(gh pr view $NUMBER --json mergeCommit --jq .mergeCommit.oid)
           title=$(gh pr view $NUMBER --json title --jq .title)

.github/workflows/comment-driven-automation.yml

@@ -1,7 +1,7 @@
 name: Comment driven automations
 on:
   issue_comment:
-    types: [created]
+    types: [ created ]
 
 jobs:
   comment-driven-automation:
@@ -56,7 +56,7 @@ jobs:
       - name: Run command
         env:
           NUMBER: ${{ github.event.issue.number }}
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           available_commands="Available commands:
             * \`@opentelemetrybot spotless\` - runs \`./gradlew spotlessApply\`

.github/workflows/prepare-patch-release.yml

@@ -49,7 +49,7 @@ jobs:
       - name: Create pull request
         env:
           # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           message="Prepare release $VERSION"
           branch="opentelemetrybot/prepare-release-${VERSION}"

.github/workflows/prepare-release-branch.yml

@@ -61,7 +61,7 @@ jobs:
       - name: Create pull request against the release branch
         env:
           # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           message="Prepare release $VERSION"
           branch="opentelemetrybot/prepare-release-${VERSION}"
@@ -110,7 +110,7 @@ jobs:
       - name: Create pull request against main
         env:
           # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           message="Update version to $NEXT_VERSION"
           body="Update version to \`$NEXT_VERSION\`."

.github/workflows/release.yml

@@ -195,7 +195,7 @@ jobs:
         env:
           VERSION: ${{ needs.release.outputs.version }}
           # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           if git diff --quiet; then
             if [[ $VERSION == *.0 ]]; then
@@ -224,7 +224,7 @@ jobs:
     with:
       version: ${{ needs.release.outputs.version }}
     secrets:
-      BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
+      OPENTELEMETRYBOT_GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
 
   create-website-pull-request:
     needs: release
@@ -232,4 +232,4 @@ jobs:
     with:
       version: ${{ needs.release.outputs.version }}
     secrets:
-      BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
+      OPENTELEMETRYBOT_GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}

.github/workflows/reusable-create-operator-pull-request.yml

@@ -7,7 +7,7 @@ on:
         type: string
         required: true
     secrets:
-      BOT_TOKEN:
+      OPENTELEMETRYBOT_GITHUB_TOKEN:
         required: true
   # to help with partial release build failures
   workflow_dispatch:
@@ -23,7 +23,7 @@ jobs:
       - name: Sync opentelemetry-operator fork
         env:
           # this is the personal access token used for "gh repo sync" below
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           # synchronizing the fork is fast, and avoids the need to fetch the full upstream repo
           # (fetching the upstream repo with "--depth 1" would lead to "shallow update not allowed"
@@ -36,7 +36,7 @@ jobs:
         with:
           repository: opentelemetrybot/opentelemetry-operator
           # this is the personal access token used for "git push" below
-          token: ${{ secrets.BOT_TOKEN }}
+          token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
 
       - name: Update version
         env:
@@ -54,7 +54,7 @@ jobs:
         env:
           VERSION: ${{ inputs.version }}
           # this is the personal access token used for "gh pr create" below
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           message="Update the javaagent version to $VERSION"
           # note that @open-telemetry/java-instrumentation-approvers cannot be used below

.github/workflows/reusable-create-website-pull-request.yml

@@ -7,7 +7,7 @@ on:
         type: string
         required: true
     secrets:
-      BOT_TOKEN:
+      OPENTELEMETRYBOT_GITHUB_TOKEN:
         required: true
   # to help with partial release build failures
   workflow_dispatch:
@@ -23,7 +23,7 @@ jobs:
       - name: Sync opentelemetry.io fork
         env:
           # this is the personal access token used for "gh repo sync" below
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           # synchronizing the fork is fast, and avoids the need to fetch the full upstream repo
           # (fetching the upstream repo with "--depth 1" would lead to "shallow update not allowed"
@@ -36,7 +36,7 @@ jobs:
         with:
           repository: opentelemetrybot/opentelemetry.io
           # this is the personal access token used for "git push" below
-          token: ${{ secrets.BOT_TOKEN }}
+          token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
 
       - name: Update version
         env:
@@ -55,7 +55,7 @@ jobs:
         env:
           VERSION: ${{ inputs.version }}
           # this is the personal access token used for "gh pr create" below
-          GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
         run: |
           message="Update the Java instrumentation versions to $VERSION"
           body="Update the Java instrumentation version to \`$VERSION\`."