Skip to content

Commit 055d083

Browse files
committed
ci: use GITHUB_TOKEN instead of custom GH_TOKEN in release workflow
- Replace secrets.GH_TOKEN with secrets.GITHUB_TOKEN in release-please action - Replace secrets.GH_TOKEN with secrets.GITHUB_TOKEN in upload-release-action - Leverages built-in token with existing workflow permissions (contents: write, pull-requests: write) - Improves security by using scoped token instead of custom PAT"
1 parent 38e0197 commit 055d083

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

.github/workflows/release.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
id: release-please
2525
with:
2626
release-type: rust
27-
token: ${{ secrets.GH_TOKEN }}
27+
token: ${{ secrets.GITHUB_TOKEN }}
2828

2929
upload-binaries:
3030
strategy:
@@ -100,7 +100,7 @@ jobs:
100100
- name: Upload archived binary to release
101101
uses: svenstaro/upload-release-action@v2
102102
with:
103-
repo_token: ${{ secrets.GH_TOKEN }}
103+
repo_token: ${{ secrets.GITHUB_TOKEN }}
104104
file: target/${{ matrix.target }}/release/git-mob-${{ matrix.target }}.tar.gz
105105
tag: ${{ needs.release-please.outputs.tag_name }}
106106

0 commit comments

Comments
 (0)