token: switch over to GITHUB_TOKEN

Signed-off-by: Simon Beaudoin <sbeaudoi@qti.qualcomm.com>

Author: simonbeaudoin0935

.github/workflows/qcom-promote-prebuilt-reusable-workflow.yml

@@ -231,7 +231,7 @@ jobs:
         run: |
           cd ./package-repo
 
-          gh auth login --with-token <<< "${{secrets.DEB_PKG_BOT_CI_TOKEN}}"
+          gh auth login --with-token <<< "${{secrets.GITHUB_TOKEN}}"
 
           PR_TITLE="Promotion to ${{env.NEW_DEBIAN_VERSION}} (Artifactory tag: ${{inputs.new-tag}})"
 

.github/workflows/qcom-promote-upstream-reusable-workflow.yml

@@ -31,6 +31,10 @@ on:
         type: string
         required: true
 
+    secrets:
+      TOKEN:
+        required: false
+
 permissions:
   contents: write
   packages: read
@@ -87,6 +91,11 @@ jobs:
           path: ./package-repo
           fetch-depth: 0
 
+      - name: Authenticate with GitHub
+        run : |
+          # TODO remove this redundant login
+          gh auth login --with-token <<< "${{secrets.GITHUB_TOKEN}}"
+
       - name: Show branches/tags and checkout debian/upstream latest
         run: |
           cd ./package-repo
@@ -136,7 +145,6 @@ jobs:
           echo "ℹ️ This is likely a second attempt to promote the same upstream tag, where the first attempt already added the upstream tag in the upstram branch"
 
           # Check if there is a PR open for this already
-          gh auth login --with-token <<< "${{secrets.DEB_PKG_BOT_CI_TOKEN}}"
           PRS=$(gh pr list --head "debian/pr/${{env.NORMALIZED_VERSION}}-1" --state open --json number --jq '.[].number')
           if [ -n "$PRS" ]; then
             echo "❌ An open PR already exists for this promotion attempt: $PRS"
@@ -163,7 +171,11 @@ jobs:
       - name: Add Upstream Link As A Remote And Fetch Tags
         run: |
           cd ./package-repo
-          git remote add upstream-source https://x-access-token:${{secrets.DEB_PKG_BOT_CI_TOKEN}}@github.com/${{inputs.upstream-repo}}.git
+          if [ -n "${{secrets.TOKEN}}" ]; then
+            git remote add upstream-source https://x-access-token:${{secrets.TOKEN}}@github.com/${{inputs.upstream-repo}}.git
+          else
+            git remote add upstream-source https://github.com/${{inputs.upstream-repo}}.git
+          fi
           git fetch upstream-source "+refs/tags/*:refs/tags/*"
 
       - name: Ensure the tag exists in the upstream repo
@@ -240,9 +252,6 @@ jobs:
         run: |
           cd ./package-repo
 
-          # TODO remove this redundant login
-          gh auth login --with-token <<< "${{secrets.DEB_PKG_BOT_CI_TOKEN}}"
-
           ../qcom-build-utils/scripts/create_promotion_pr.py \
             --base-branch "${{inputs.debian-branch}}" \
             --upstream-tag "${{inputs.upstream-tag}}" \

.github/workflows/qcom-release-reusable-workflow.yml

@@ -323,7 +323,7 @@ jobs:
       - name: Notify qcom-distro-images of new release via repository dispatch
         uses: peter-evans/repository-dispatch@v3
         with:
-          token: ${{secrets.DEB_PKG_BOT_CI_TOKEN}}
+          token: ${{secrets.GITHUB_TOKEN}}
           repository: qualcomm-linux/qcom-distro-images
           event-type: pkg-repo-release
           client-payload: >-

.github/workflows/qcom-upstream-pr-pkg-build-reusable-workflow.yml

@@ -65,7 +65,7 @@ jobs:
       options: --privileged
       credentials:
         username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
+        password: ${{ ITHUB_TOKEN }}
 
     steps: