fix(ci): Adjust GitHub token permissions for gh CLI

I hate CI/CD
alexpovel · Oct 22, 2023 · 243878b · 243878b
1 parent b87c8dc
commit 243878b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -102,7 +102,9 @@ jobs:
         # attached yet.
         if: steps.release.outputs.release_created
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # `secrets.GITHUB_TOKEN` would work here (with appropriate `permissions`),
+          # but just reuse what we already have.
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
         run: >
           gh release edit
           ${{ steps.release.outputs.tag_name }}
@@ -226,6 +228,9 @@ jobs:
       - release-please
       - build-upload
 
+    permissions:
+      contents: write # For `gh` to edit release
+
     steps:
       - uses: actions/checkout@v4
       - name: Remove draft status from release