Write token AK

.github/workflows/contracts.yml

@@ -41,6 +41,7 @@ jobs:
     permissions: # Must change the job token permissions to use Akeyless JWT auth
       id-token: write
       contents: read
+    if: ${{ ! startsWith(github.triggering_actor, 'akeyless') }}
     env:
       BROADCAST: ${{ github.event_name == 'push' && 'true' || inputs.broadcast }}
       L1_RPC_KIND: ${{ github.event_name == 'push' && 'alchemy' || inputs.l1_rpc_kind }}
@@ -51,9 +52,19 @@ jobs:
       GS_SEQUENCER_ADDRESS: ${{ github.event_name == 'push' && '0xF20B236A87e26D1Ac7290D0F70f637af8145D54e' || inputs.gs_sequenncer_address }}
     steps:
 
-      - name: Checkout
+      - name: "Get GitHub Token from Akeyless"
+        id: get_auth_token
+        uses:
+          docker://us-west1-docker.pkg.dev/devopsre/akeyless-public/akeyless-action:latest
+        with:
+          api-url: https://api.gateway.akeyless.celo-networks-dev.org
+          access-id: p-kf9vjzruht6l
+          dynamic-secrets: '{"/dynamic-secrets/keys/github/optimism/contents=write,pull_requests=write":"PAT"}'
+
+      - name: "Checkout current PR"
         uses: actions/checkout@v4
         with:
+          token: ${{ env.PAT }}
           submodules: recursive
           fetch-depth: 0
 
@@ -92,3 +103,8 @@ jobs:
         run: |
           cd packages/contracts-bedrock
           forge script scripts/Deploy.s.sol:Deploy --sig 'sync()' --rpc-url $L1_RPC_URL
+
+      - name: "Commit changed files"
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: '[Automatic] - Commit files'