update release PR workflow token (#459)

* update release PR workflow token Signed-off-by: jamshale <jamiehalebc@gmail.com> * Adjust permissions Signed-off-by: jamshale <jamiehalebc@gmail.com> --------- Signed-off-by: jamshale <jamiehalebc@gmail.com>
hyperledger · May 15, 2024 · ae204d9 · ae204d9
1 parent 3725a70
commit ae204d9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 10 deletions.
diff --git a/.github/workflows/create-release-pr.yaml b/.github/workflows/create-release-pr.yaml
@@ -12,13 +12,12 @@ on:
  - cron: "0 0 * * *"
 
 
-permissions:
- contents: write
-
 jobs:
  checks:
  name: "Create Release PR"
- permissions: write-all
+ permissions:
+ contents: write
+ pull-requests: write
  runs-on: ubuntu-latest
  outputs:
  current_available_version: ${{ steps.current_available_version.outputs.version }}
@@ -360,7 +359,7 @@ jobs:
  with:
  author: Release Bot <release-bot@users.noreply.github.com>
  committer: Release Bot <release-bot@users.noreply.github.com>
- token: ${{ secrets.BOT_PR_PAT }}
+ token: ${{ secrets.GITHUB_TOKEN }}
  commit-message: "Release v${{ steps.prepare_pr.outputs.tag_version }} Upgrades"
  title: "Release for aries-cloudagent v${{ steps.prepare_pr.outputs.tag_version }}"
  body: "${{ steps.prepare_pr.outputs.pr_body }}"

diff --git a/.github/workflows/create-release.yaml b/.github/workflows/create-release.yaml
@@ -5,14 +5,11 @@ on:
  branches: ['main']
  paths: ['*/poetry.lock']
 
-permissions:
- contents: write
-
 jobs:
-
  checks:
  name: "Create Release"
- permissions: write-all
+ permissions:
+ contents: write
  runs-on: ubuntu-latest
  outputs:
  should_create_release: ${{ steps.should_create_release.outputs.should_create_release }}