.github/workflows: Use original GitHub token for releases

bflad · Apr 13, 2023 · 56f6b4f · 56f6b4f
1 parent f98f655
commit 56f6b4f
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -5,7 +5,8 @@ on:
       - "v[0-9]+.[0-9]+.[0-9]+"
 
 permissions:
-  contents: write
+  # GoReleaser uses separate token for publishing to Homebrew repository
+  contents: read
 
 jobs:
   go_mod:
@@ -63,7 +64,7 @@ jobs:
       - name: goreleaser release
         uses: goreleaser/goreleaser-action@f82d6c1c344bcacabba2c841718984797f664a6b # v4.2.0
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}
           GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
         with:
           args: release --release-notes RELEASE-NOTES.md --clean