Problem
Some workflows (test_and_deploy.yml and issue_assignment.yml) rely on a custom secret secrets.infra_automation.
If this secret is not configured in the repository, the workflows fail at runtime.
Why this matters
- Introduces a hidden dependency on a repo secret
- Causes workflow failures for new contributors or forks
- Harder to maintain than GitHub’s built-in token
Suggested Solution
- Replace
secrets.infra_automation with ${{ secrets.GITHUB_TOKEN }}
- Add explicit workflow-level permissions for required scopes (e.g., issues, pages, contents)
Benefits
- Reduces failure surface
- Follows GitHub best practices
- Improves maintainability and security