CI: Subs Workflow can read PAT

AMReX-Codes · Nov 30, 2023 · bdd5308 · bdd5308
1 parent 4ea67ac
commit bdd5308
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 10 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -11,10 +11,6 @@ jobs:
     # Pushes should only run on mainline branch "development"
     if: github.event_name == 'push' && github.repository == 'AMReX-Codes/pyamrex' && github.ref == 'refs/heads/development'
     name: 🔄 Update Stub Files
-    permissions:
-      # Give the default GITHUB_TOKEN write permission to commit and push the
-      # changed files back to the repository.
-      contents: write
     uses: ./.github/workflows/stubs.yml
 
   ubuntu:

diff --git a/.github/workflows/stubs.yml b/.github/workflows/stubs.yml
@@ -2,7 +2,11 @@ name: 🔄 Update Stub Files
 
 # This workflow updates the .pyi stub files for documentation and interactive use.
 
-on: [workflow_call]
+on:
+  workflow_call:
+    secrets:
+        PYAMREX_PUSH_TOKEN:
+          required: true
 
 concurrency:
   group: ${{ github.ref }}-${{ github.head_ref }}-stubs
@@ -19,11 +23,6 @@ jobs:
       CXXFLAGS: "-O1"
       OMP_NUM_THREAD: 2
 
-    permissions:
-      # Give the default GITHUB_TOKEN write permission to commit and push the
-      # changed files back to the repository.
-      contents: write
-
     steps:
     - uses: actions/checkout@v3
       with: