Set GH_TOKEN variable. Drop write permissions (#9)

Signed-off-by: Andrea Mazzotti <andrea.mazzotti@suse.com>
rancher · Jul 1, 2024 · ec21b73 · ec21b73
1 parent 3bb0b2c
commit ec21b73
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/refresh-channels.yaml b/.github/workflows/refresh-channels.yaml
@@ -6,8 +6,6 @@ on:
 
 jobs:
   refresh-channels:
-    permissions:
-      contents: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -18,6 +16,8 @@ jobs:
       - name: Run refresh script
         run: ./refresh_channels.sh
       - name: Open a new PR
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git config --global user.email "do-not-use@elemental.suse.com"
           git config --global user.name "GitHub Action Runner"