use CasperWA/push-protected

.github/workflows/prerelease.yml

@@ -75,7 +75,6 @@ jobs:
       run: |
         git config user.email ${{ secrets.CI_EMAIL }}
         git config user.name ${{ secrets.CI_USER }}
-        git remote set-url --push origin https://pypebot:${{ secrets.ADMIN_TOKEN }}@github.com/pypeclub/openpype
         cd repos/avalon-core
         git checkout main
         git pull
@@ -84,8 +83,14 @@ jobs:
         git commit -m "[Automated] Bump version"
         tag_name="CI/${{ steps.version.outputs.next_tag }}"
         git tag -a $tag_name -m "nightly build"
-        git push
-        git push origin $tag_name
+    
+    - name: Push to protected main branch
+      uses: CasperWA/push-protected@v2
+      with:
+        token: ${{ secrets.ADMIN_TOKEN }}
+        branch: main
+        tags: true
+        unprotect_reviews: true
 
     - name: 🔨 Merge main back to develop    
       uses: everlytic/branch-merge@1.1.0