Use dedicated secret to get audit-log (#18)

Author: ToreMerkely

.github/workflows/build-deploy-backend.yml

@@ -135,7 +135,7 @@ jobs:
       - name: Get approval actor from audit log
         id: get-approver
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.READ_AUDIT_LOG }}
           OWNER: kosli-dev
           REPO: github-release-example
           WORKFLOW_RUN_ID: ${{ github.run_id }}

secrets/gh-repo-read-audit-log.txt

@@ -0,0 +1,26 @@
+secret-name: READ_AUDIT_LOG
+secret-expire: 2026-04-14
+secret-updated: 2025-04-14
+secret-updated-by: tore
+secret-type: gh-repo
+is-secret: true
+secret-usage: Used to read Organisation audit log
+
+update-instructions:
+Go to the Developer's Github profile
+  -> Settings
+  -> Developer settings
+  -> Personal access tokens
+  -> New fine-grained personal access token
+  -> Generate new token
+Token name: github-release-example-audit-log
+Resource owner: kosli-dev
+Expiration: one year
+Description: Read audit log
+Repository access: Only select repositories - kosli-dev/github-release-example
+Permissions:
+  Organization permissions - Administration - Access: Read-only
+
+
+Go to https://github.com/kosli-dev/server/settings/secrets/actions
+under <Repository secrets>