Skip to content

Commit 0e32a92

Browse files
feat: replace github_token secret in release ci file
1 parent cd9bbab commit 0e32a92

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

.github/workflows/github-release.yml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -29,9 +29,6 @@ on:
2929
description: "True if it is a signer release"
3030
required: true
3131
type: string
32-
secrets:
33-
GH_TOKEN:
34-
required: true
3532

3633
concurrency:
3734
group: github-release-${{ github.head_ref || github.ref }}
@@ -95,6 +92,8 @@ jobs:
9592
runs-on: ubuntu-latest
9693
needs:
9794
- build-binaries
95+
permissions:
96+
contents: write
9897
steps:
9998
## Creates releases
10099
- name: Create Release
@@ -106,7 +105,7 @@ jobs:
106105
signer_docker_tag: ${{ inputs.signer_docker_tag }}
107106
is_node_release: ${{ inputs.is_node_release }}
108107
is_signer_release: ${{ inputs.is_signer_release }}
109-
GH_TOKEN: ${{ secrets.GH_TOKEN }}
108+
GH_TOKEN: ${{ github.TOKEN }}
110109

111110

112111
## Builds arch dependent Docker images from binaries
@@ -156,9 +155,11 @@ jobs:
156155
- build-binaries
157156
- create-release
158157
- docker-image
158+
permissions:
159+
pull-requests: write
159160
steps:
160161
- name: Open Downstream PR
161162
id: create-pr
162163
uses: stacks-network/actions/stacks-core/release/downstream-pr@main
163164
with:
164-
token: ${{ secrets.GH_TOKEN }}
165+
token: ${{ github.TOKEN }}

0 commit comments

Comments
 (0)