From 23dcbbecb28e43949beb22f3c18562698f0897fb Mon Sep 17 00:00:00 2001 From: Pun Butrach Date: Mon, 14 Apr 2025 19:08:01 +0700 Subject: [PATCH] ci: Avoid repository push access token --- .github/workflows/sync_crowdin.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/sync_crowdin.yml b/.github/workflows/sync_crowdin.yml index 41f3b35c..7088a28b 100644 --- a/.github/workflows/sync_crowdin.yml +++ b/.github/workflows/sync_crowdin.yml @@ -15,6 +15,9 @@ jobs: sync: name: Sync runs-on: ubuntu-latest + permissions: + contents: write + pull-requests: write steps: - name: Checkout uses: actions/checkout@v4 @@ -39,10 +42,8 @@ jobs: pull_request_body: "Sync translations from [crowdin.com/project/revanced](https://crowdin.com/project/revanced)" pull_request_base_branch_name: "dev" commit_message: "chore: Sync translations" - github_user_name: revanced-bot - github_user_email: github@revanced.app env: - GITHUB_TOKEN: ${{ secrets.REPOSITORY_PUSH_ACCESS }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} CROWDIN_PROJECT_ID: ${{ secrets.CROWDIN_PROJECT_ID }} CROWDIN_PERSONAL_TOKEN: ${{ secrets.CROWDIN_PERSONAL_TOKEN }} @@ -69,8 +70,6 @@ jobs: - name: Commit translations run: | - git config user.name revanced-bot - git config user.email github@revanced.app sudo chown -R $USER:$USER .git git commit -m "chore: Remove empty values from JSON" assets/i18n/*.i18n.json git push origin HEAD:feat/translations