github: workflow: another permissions fix (token)

Signed-off-by: Jaroslav Kysela <perex@perex.cz>

diff --git a/.github/workflows/label-automation.yml b/.github/workflows/label-automation.yml
index 2a77d4ce31420dea14353a37bd3d4ef7aab33691..d6ee04c8c6606b71e472671d54dc74df151689f0 100644 (file)
--- a/.github/workflows/label-automation.yml
+++ b/.github/workflows/label-automation.yml
@@ -21,5 +21,3 @@ jobs:
     uses: ./.github/workflows/reusable-label-commenter.yml
     with:
       config-path: '.github/label-descriptions.yml'
-    secrets:
-      github-token: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index 66516536777ec1099fa6ddb9a6d8a429a913536c..386c4ce19f84210e0d76366211913a712725bbf4 100644 (file)
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -25,5 +25,3 @@ jobs:
       config-path: '.github/label-descriptions.yml'
       sob-label: 'signed off by'
       pr-number: ${{ github.event_name == 'workflow_dispatch' && format('{0}', inputs.pr_number) || '' }}
-    secrets:
-      github-token: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/reusable-label-commenter.yml b/.github/workflows/reusable-label-commenter.yml
index 296e408d2ff3522c5eacc4d4086cff466ed7b781..ac7638f6d633cfda0660ff96a12f23db57fb4293 100644 (file)
--- a/.github/workflows/reusable-label-commenter.yml
+++ b/.github/workflows/reusable-label-commenter.yml
@@ -8,10 +8,6 @@ on:
         required: false
         type: string
         default: '.github/label-descriptions.yml'
-    secrets:
-      github-token:
-        description: 'GitHub token for API access'
-        required: false
 
 jobs:
   add-label-comment:
@@ -52,7 +48,7 @@ jobs:
       - name: Handle label action
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.github-token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             // Get the label and action
             const label = context.payload.label.name;

diff --git a/.github/workflows/reusable-sob-validator.yml b/.github/workflows/reusable-sob-validator.yml
index 15a94d140997922b1be92fde83816edb4c240e1b..97cc6818a1f20f3c5fdcdd5aa155ed204d4d613b 100644 (file)
--- a/.github/workflows/reusable-sob-validator.yml
+++ b/.github/workflows/reusable-sob-validator.yml
@@ -18,10 +18,6 @@ on:
         required: false
         type: string
         default: ''
-    secrets:
-      github-token:
-        description: 'GitHub token for API access'
-        required: false
 
 jobs:
   validate-signedoff:
@@ -81,7 +77,7 @@ jobs:
         id: validate
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.github-token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             // Parse config from JSON
             const config = JSON.parse(process.env.CONFIG_JSON);
@@ -187,7 +183,7 @@ jobs:
         if: steps.validate.outputs.has_issues == 'true'
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.github-token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             await github.rest.issues.addLabels({
               owner: context.repo.owner,
@@ -200,7 +196,7 @@ jobs:
         if: steps.validate.outputs.has_issues == 'true'
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.github-token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             const commentId = '<!-- sob-validator -->';
             const issues = process.env.SOB_ISSUES;
@@ -253,7 +249,7 @@ jobs:
         uses: actions/github-script@v7
         continue-on-error: true
         with:
-          github-token: ${{ secrets.github-token || secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             const prNumber = parseInt('${{ steps.pr-number.outputs.number }}', 10);
             const labelName = '${{ inputs.sob-label }}';