chore: use github.token for CI rather than PATs (#824)

SWI-Prolog · Jan 3, 2025 · d54a884 · d54a884
1 parent d07c8ca
commit d54a884
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 4 deletions.
diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml
@@ -77,6 +77,12 @@ jobs:
     if: ${{ github.ref == 'refs/heads/master' }}
     needs: [ test, lint ]
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      repository-projects: write
+      pages: write
+      issues: write
     steps:
     - uses: actions/checkout@v4
     - uses: actions/setup-node@v4
@@ -90,7 +96,7 @@ jobs:
     - name: "Create Bundle"
       env:
         NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+        GITHUB_TOKEN: ${{ github.token }}
       run: |
         # The semantic-release command errors if this folder does not exist
         mkdir ./bundle
@@ -103,5 +109,5 @@ jobs:
     - name: Release
       env:
         NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-        GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+        GITHUB_TOKEN: ${{ github.token }}
       run: npx semantic-release
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
@@ -10,6 +10,10 @@ jobs:
       matrix:
         dependency: ['swipl', 'emsdk', 'zlib', 'pcre2']
 
+    permissions:
+      contents: write
+      pull-requests: write
+
     steps:
       - uses: actions/checkout@v4
         with:
@@ -18,7 +22,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           # Consider using lts
-          node-version: 20.x
+          node-version: 22.x
       - name: Commit latest release version
         run: |
           npm ci
@@ -63,4 +67,4 @@ jobs:
             fi
           fi
         env:
-          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          GH_TOKEN: ${{ github.token }}