ci: Use permissions and regular GitHub token instead of PAT

This commit is contained in:
oSumAtrIX 2024-09-30 23:41:48 +02:00
parent b81a551dc3
commit 070388a42b
No known key found for this signature in database
GPG key ID: A9B3094ACDB604B4
3 changed files with 7 additions and 3 deletions

View file

@ -8,6 +8,8 @@ on:
jobs:
pull:
name: Pull strings
permissions:
contents: write
runs-on: ubuntu-latest
steps:
- name: Checkout
@ -30,6 +32,6 @@ jobs:
github_user_name: revanced-bot
github_user_email: github@revanced.app
env:
GITHUB_TOKEN: ${{ secrets.REPOSITORY_PUSH_ACCESS }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}

View file

@ -24,6 +24,5 @@ jobs:
config: crowdin.yml
upload_sources: true
env:
GITHUB_TOKEN: ${{ secrets.REPOSITORY_PUSH_ACCESS }}
CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }}
CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }}

View file

@ -10,6 +10,9 @@ on:
jobs:
release:
name: Release
permissions:
contents: write
packages: write
runs-on: ubuntu-latest
steps:
- name: Checkout
@ -46,5 +49,5 @@ jobs:
- name: Release
env:
GITHUB_TOKEN: ${{ secrets.REPOSITORY_PUSH_ACCESS }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: npm exec semantic-release