cicd: using dedicated token for dependabot autoupdate

ansys · Aug 18, 2023 · 6e7cf32 · 6e7cf32
1 parent ee75f0d
commit 6e7cf32
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/.github/workflows/ci_cd.yml b/.github/workflows/ci_cd.yml
@@ -70,8 +70,6 @@ jobs:
   changelog-check:
     name: Changelog Update Check
     if: github.event_name == 'pull_request'
-    permissions:
-      contents: write # Give the default GITHUB_TOKEN write permission
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
@@ -82,10 +80,11 @@ jobs:
           activationLabel: 'dependabot'
           changelogPath: './CHANGELOG.md'
 
-      - uses: stefanzweifel/git-auto-commit-action@v4
+      - uses: ad-m/github-push-action@master
         if: ${{ github.actor == 'dependabot[bot]' }}
         with:
-          commit_message: "Updated Changelog"
+          github_token: ${{ secrets.DEPENDABOT_TOKEN }}
+          branch: ${{ github.ref }}
 
       - name: Get all doc files that have changed
         id: changed-files-yaml