ci: enhance AutoGenerator workflow with secure token use

- Remove `pull-requests` permission from the workflow - Change `GH_TOKEN` environment variable to use `secrets.CR_PAT` instead of `github.token` Signed-off-by: 陳鈞 <[email protected]>
YoutubeClipPlaylist · Oct 20, 2024 · b61b311 · b61b311
1 parent 94e28a2
commit b61b311
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/AutoGenerator.yml b/.github/workflows/AutoGenerator.yml
@@ -9,7 +9,6 @@ on:
   workflow_dispatch:
 
 permissions:
-  pull-requests: write
   contents: write
 
 jobs:
@@ -47,7 +46,8 @@ jobs:
 
       - name: Create or Update Pull Request
         env:
-          GH_TOKEN: ${{ github.token }}
+          # Use CR_PAT to trigger another workflow
+          GH_TOKEN: ${{ secrets.CR_PAT }}
         run: |
           gh_pr_up() {
             gh pr create "$@" || gh pr edit "$@"