ci: create workflow to automatically update snapshots

[G-Rath]

This is based off the robot in osv-scanner

[another-rex]

I have also added PR_TOKEN_BOT to osv.dev, so this should work immediately

[G-Rath]

@another-rex but did you give the bot permission to access the repository? 😅

[another-rex]

Hmm... it should have full access to the repo. Maybe it needs some special token perms?

[G-Rath]

what about the token itself? its permissions can be scoped to specific repos

[another-rex]

Ok, made a fine grained token with I think the right types (For some reason fine grained tokens can't actually be scoped to specific repos that is not directly under your name, e.g. this is under google/osv.dev, not osv-robot/osv.dev, so it can't be scoped 🤦 )

Let's see:

https://github.com/google/osv.dev/actions/runs/19482596515

EDIT: Well that didn't work.

[G-Rath]

For some reason fine grained tokens can't actually be scoped to specific repos that is not directly under your name, e.g. this is under google/osv.dev, not osv-robot/osv.dev, so it can't be scoped

That should be possible so long as you're a member of the org? (its not possible for repos you've an outside collaborator on)

[another-rex]

Ayy: #4356

I really don't understand fine grained tokens, switched back to classical tokens.