move shared change check to separate workflow with correct permissions (#801)

Author: matt-codecov

.github/workflows/ci.yml

@@ -52,12 +52,6 @@ jobs:
     with:
       repo: ${{ vars.CODECOV_IMAGE_V2 || 'codecov/self-hosted-api' }}
 
-  shared-change-checker:
-    name: See if shared changed
-    uses: codecov/gha-workflows/.github/workflows/diff-dep.yml@main
-    with:
-      dep: 'shared'
-
   build-self-hosted:
     name: Build Self Hosted API
     needs: [build, test]

.github/workflows/pr_detect_shared_changes.yml

@@ -0,0 +1,14 @@
+name: Detect dep version changes
+
+on:
+  pull_request:
+
+permissions:
+  pull-requests: "write"
+
+jobs:
+  shared-change-checker:
+    name: See if shared changed
+    uses: codecov/gha-workflows/.github/workflows/diff-dep.yml@main
+    with:
+      dep: 'shared'