ci(copr): Use GITHUB_TOKEN instead of PAT to update release (#4289)

This commit is contained in:
ReenigneArcher 2025-09-23 14:44:24 -04:00 committed by GitHub
commit d924dd9091
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 5 additions and 1 deletions

View file

@ -46,6 +46,8 @@ jobs:
startsWith(github.repository, 'LizardByte/') startsWith(github.repository, 'LizardByte/')
needs: needs:
- call-copr-ci - call-copr-ci
permissions:
contents: write
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Download build artifacts - name: Download build artifacts
@ -68,5 +70,5 @@ jobs:
name: ${{ github.event.release.name }} name: ${{ github.event.release.name }}
prerelease: true prerelease: true
tag: ${{ github.event.release.tag_name }} tag: ${{ github.event.release.tag_name }}
token: ${{ secrets.GH_BOT_TOKEN }} token: ${{ secrets.GITHUB_TOKEN }} # use built-in token to avoid repeating workflow triggers
virustotal_api_key: ${{ secrets.VIRUSTOTAL_API_KEY }} virustotal_api_key: ${{ secrets.VIRUSTOTAL_API_KEY }}

View file

@ -95,6 +95,8 @@ jobs:
name: Linux Copr name: Linux Copr
if: github.event_name != 'push' # releases are handled directly in ci-copr.yml if: github.event_name != 'push' # releases are handled directly in ci-copr.yml
needs: release-setup needs: release-setup
permissions:
contents: write # needed to update releases
uses: ./.github/workflows/ci-copr.yml uses: ./.github/workflows/ci-copr.yml
secrets: secrets:
COPR_BETA_WEBHOOK_TOKEN: ${{ secrets.COPR_BETA_WEBHOOK_TOKEN }} COPR_BETA_WEBHOOK_TOKEN: ${{ secrets.COPR_BETA_WEBHOOK_TOKEN }}