Trading Partner Workflow - add all permissions (Test)

PiperOrigin-RevId: 446058722
galeone · May 2, 2022 · 54fa107 · 54fa107
1 parent ea50a40
commit 54fa107
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/.github/workflows/trusted-partners.yml b/.github/workflows/trusted-partners.yml
@@ -17,14 +17,12 @@ name: assign-partner-tags
 on:
   pull_request:
 
+# TODO: Test permissions issue. Remove after test and give targetted permission
+permissions: write-all
+
 jobs:
   assign-partner-tags:
     runs-on: ubuntu-latest
-    # Add permissions needed to attach tags into the PR
-    permissions:
-      issues: write
-      contents: write
-      pull-requests: write
     if: |
       github.event.pull_request.draft == false &&
       github.event.sender.type == 'User'
@@ -34,7 +32,7 @@ jobs:
       - name: Trusted-Partners-PR
         uses: actions/github-script@v5
         with:
-          github-token: ${{secrets.GITHUB_TOKEN}}
+          github-token: ${{secrets.TF_PR_TRUSTED_PARTNER}}
           script: |
             const script = require('./.github/workflows/trusted_partners.js');
             const username = context.payload.pull_request.user.login;