verify token perms

Author: bmastbergen

.github/workflows/clk-rebase.yml

@@ -60,12 +60,23 @@ jobs:
           # with --allowerasing
           dnf install curl --allowerasing -y
 
-      - name: Verify token permissions
-        env:
-          GH_TOKEN: ${{ steps.generate-token.outputs.token }}
+      - name: Check if token can push
         run: |
-          echo "Verifying token permissions by inspecting API response headers..."
-          gh api -i /
+          REPO_PERMS=$(curl -s -H "Authorization: Bearer ${{ steps.generate-token.outputs.token }}" \
+            -H "Accept: application/vnd.github+json" \
+            "https://api.github.com/repos/${{ github.repository }}" \
+            | jq -r '.permissions')
+          
+          PUSH_ALLOWED=$(echo "$REPO_PERMS" | jq -r '.push')
+          
+          if [ "$PUSH_ALLOWED" == "true" ]; then
+            echo "✓ Token has push permissions"
+          else
+            echo "✗ Token does NOT have push permissions. Full permissions object: $REPO_PERMS"
+            exit 1
+          fi
+
+      
 
       - name: Checkout kernel-src-tree
         uses: actions/checkout@v4