fix releasepost pipeline

Author: olblak

.github/workflows/updatecli_release.yaml

@@ -9,9 +9,13 @@ on:
   repository_dispatch:
     types:
       - "updatecli-release"
+permissions: {}
 jobs:
   updatecli:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: "Checkout"
         uses: "actions/checkout@v4"
@@ -35,10 +39,7 @@ jobs:
       - name: "Run updatecli"
         run: "updatecli compose apply --file updatecli-compose-release.yaml --experimental"
         env:
-          # The releasepost policy requires the env GITHUB_TOKEN even though
-          # So I am temporarily adding an empty value to publish the release note
-          GITHUB_TOKEN: ""
-          RELEASEPOST_GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
+          RELEASEPOST_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           UPDATECLI_GITHUB_APP_CLIENT_ID: ${{ secrets.UPDATECLIBOT_APP_ID }}
           UPDATECLI_GITHUB_APP_PRIVATE_KEY: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
           UPDATECLI_GITHUB_APP_INSTALLATION_ID: ${{ secrets.UPDATECLIBOT_APP_INSTALLATION_ID }}