gemini's turn

Author: bmastbergen

.github/workflows/clk-rebase.yml

@@ -8,6 +8,10 @@ on:
     branches:
       - clk-rebase-ga
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   clk-rebase:
     runs-on: kernel-build
@@ -25,6 +29,11 @@ jobs:
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
+          permissions: >-
+            {
+              "contents": "write",
+              "pull_requests": "write"
+            }
 
       - name: Debug token generation
         run: |
@@ -75,6 +84,7 @@ jobs:
           token: ${{ steps.generate-token.outputs.token }}
           path: kernel-src-tree
           fetch-depth: 0
+          persist-credentials: true
 
       - name: Checkout kernel-src-tree-tools
         uses: actions/checkout@v4
@@ -88,14 +98,6 @@ jobs:
           git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
           git config --global user.name "github-actions[bot]"
 
-          # Update the remote URL directly in the kernel-src-tree repo
-          cd kernel-src-tree
-          git remote set-url origin https://x-access-token:${{ steps.generate-token.outputs.token }}@github.com/ctrliq/kernel-src-tree
-
-          # Debug: Verify remote URL (token will be redacted in output)
-          echo "Remote URL after update:"
-          git remote get-url origin
-
       - name: Perform rebase
         run: |
           cd kernel-src-tree