From 854d290313a589b65826bbc7438a3ace9909695e Mon Sep 17 00:00:00 2001
From: Egor Tensin <egor@tensin.name>
Date: Wed, 21 Oct 2026 12:19:21 +0300
Subject: workflows/aur: reuse built-in token

---
 .github/workflows/aur.yml | 5 +++--
 .github/workflows/ci.yml  | 2 ++
 2 files changed, 5 insertions(+), 2 deletions(-)

(limited to '.github')

diff --git a/.github/workflows/aur.yml b/.github/workflows/aur.yml
index efb5481..a283f18 100644
--- a/.github/workflows/aur.yml
+++ b/.github/workflows/aur.yml
@@ -14,6 +14,8 @@ jobs:
       image: archlinux:base-devel
       env:
         SSH_KEY: ${{ secrets.SSH_KEY }}
+    permissions:
+      contents: write
     steps:
       # This step must be done before actions/checkout. From the latter's
       # output:
@@ -26,9 +28,8 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
         with:
-          persist-credentials: false
+          persist-credentials: true
           ref: aur
-          token: ${{ secrets.GH_TOKEN }}
       - name: Run maintenance
         run: |
           make -C "$GITHUB_WORKSPACE" ci
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3e9891e..fdd9bb8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -84,5 +84,7 @@ jobs:
     needs:
       - publish
     if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      contents: write
     uses: $/.github/workflows/aur.yml
     secrets: inherit
-- 
cgit v1.3