aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTimo Rothenpieler <timo@rothenpieler.org>2025-07-26 19:32:12 +0200
committerTimo Rothenpieler <timo@rothenpieler.org>2025-07-26 19:36:56 +0200
commit29368ccb480d598dc342eb33e006940bc84551af (patch)
treeab860ef8df1b52a5c3859578f04ff0b851af08d6
parent631bb6c6e85a0dcb5a3948aff57d64c05f31a044 (diff)
downloadffmpeg-29368ccb480d598dc342eb33e006940bc84551af.tar.gz
forgejo/workflows: use explicit token with issue write permission
-rw-r--r--.forgejo/workflows/autolabel.yml7
1 files changed, 2 insertions, 5 deletions
diff --git a/.forgejo/workflows/autolabel.yml b/.forgejo/workflows/autolabel.yml
index 0009550c05..3eb8cd52ba 100644
--- a/.forgejo/workflows/autolabel.yml
+++ b/.forgejo/workflows/autolabel.yml
@@ -4,11 +4,6 @@ on:
issues:
types: [opened, edited]
-permissions:
- contents: read
- pull-requests: write
- issues: write
-
jobs:
pr_labeler:
runs-on: utilities
@@ -20,9 +15,11 @@ jobs:
if: ${{ forge.event_name == 'pull_request_target' }}
with:
configuration-path: .forgejo/labeler/labeler.yml
+ repo-token: ${{ secrets.AUTOLABELER_TOKEN }}
- name: Label by title-match
uses: https://github.com/actions/github-script@v7
with:
script: |
const script = require('.forgejo/labeler/labeler.js')
await script({github, context})
+ github-token: ${{ secrets.AUTOLABELER_TOKEN }}