Propogate GH token to permit push

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>
iovisor · May 6, 2024 · ee8ab0b · ee8ab0b
1 parent 5c07711
commit ee8ab0b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/fuzzing.yml b/.github/workflows/fuzzing.yml
@@ -4,7 +4,7 @@
 name: Fuzzing
 
 permissions:
-  contents: write # Required to update the corpus
+  contents: read
 
 on:
   workflow_call:
@@ -18,6 +18,11 @@ on:
         required: true
         type: string
 
+    secrets:
+        GITHUB_TOKEN:
+          description: 'Token to push changes to the repository'
+          required: true
+
 jobs:
   build:
     runs-on: ${{ inputs.platform }}

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -11,7 +11,7 @@
 name: Main
 
 permissions:
-  contents: write
+  contents: read
   security-events: write # Required by codeql task.
 
 on:
@@ -315,6 +315,8 @@ jobs:
     with:
       arch: x86_64
       platform: ubuntu-latest
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   # Disabled until https://github.com/iovisor/ubpf/issues/155 is resolved.
   # linux_debug_arm64_sanitizers: