From 5629f51893829f12815a585013c9d08f37175f57 Mon Sep 17 00:00:00 2001 From: Trevor Lovell Date: Fri, 12 Jun 2026 22:12:44 +0000 Subject: [PATCH] ci: switch to using default GITHUB_TOKEN secret A custom GH_TOKEN is currently used to checkout the repository and perform release operations in the release workflow. However, it is likely that we will be able to use the default GITHUB_TOKEN secret. This PR attempts to switch to this default secret. --- .github/workflows/release.yml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ef196b1a..0ddd2e6c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,6 +10,10 @@ jobs: uses: ./.github/workflows/test-check-lint.yml release: + permissions: + contents: write + issues: write + pull-requests: write name: Build Publish Library - Linux-x86_64 runs-on: public-blitzar-T4-gpu-vm timeout-minutes: 600 @@ -18,8 +22,6 @@ jobs: steps: - name: Checkout Code uses: actions/checkout@v3 - with: - token: ${{ secrets.GH_TOKEN }} - run: git config --global --add safe.directory $(realpath .) @@ -28,5 +30,5 @@ jobs: nix develop --command npm install semantic-release TEST_TMPDIR=$HOME/.bazel_test_opt nix develop --command npx semantic-release env: - GH_TOKEN: ${{ secrets.GH_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} CRATES_TOKEN: ${{ secrets.CRATES_TOKEN }}