forgejo/workflows: use explicit token with issue write permission

Timo Rothenpieler committed 1 year ago

Commit 29368cc1 parent 631bb6c1 file · +2 −5Browse files

Unified · Split

   issues:
     types: [opened, edited]
-permissions:
-  contents: read
-  pull-requests: write
-  issues: write
 jobs:
   pr_labeler:
     runs-on: utilities
         if: ${{ forge.event_name == 'pull_request_target' }}
         with:
           configuration-path: .forgejo/labeler/labeler.yml
+          repo-token: ${{ secrets.AUTOLABELER_TOKEN }}
       - name: Label by title-match
         uses: https://github.com/actions/github-script@v7
         with:
           script: |
             const script = require('.forgejo/labeler/labeler.js')
             await script({github, context})
+          github-token: ${{ secrets.AUTOLABELER_TOKEN }}

Keyboard shortcuts