From ec21b73a3fa6ee7ebeaea7f66e4f3412c00b536d Mon Sep 17 00:00:00 2001
From: Andrea Mazzotti <andrea.mazzotti@suse.com>
Date: Mon, 1 Jul 2024 10:03:50 +0200
Subject: [PATCH] Set GH_TOKEN variable. Drop write permissions (#9)

Signed-off-by: Andrea Mazzotti <andrea.mazzotti@suse.com>
---
 .github/workflows/refresh-channels.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/refresh-channels.yaml b/.github/workflows/refresh-channels.yaml
index 9f9656f..872a4cd 100644
--- a/.github/workflows/refresh-channels.yaml
+++ b/.github/workflows/refresh-channels.yaml
@@ -6,8 +6,6 @@ on:
 
 jobs:
   refresh-channels:
-    permissions:
-      contents: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -18,6 +16,8 @@ jobs:
       - name: Run refresh script
         run: ./refresh_channels.sh
       - name: Open a new PR
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git config --global user.email "do-not-use@elemental.suse.com"
           git config --global user.name "GitHub Action Runner"