From bdd53086e26dfa53f3be49b0a916f962f5293c66 Mon Sep 17 00:00:00 2001
From: Axel Huebl <axel.huebl@plasma.ninja>
Date: Thu, 30 Nov 2023 11:14:48 -0800
Subject: [PATCH] CI: Subs Workflow can read PAT

---
 .github/workflows/ci.yml    |  4 ----
 .github/workflows/stubs.yml | 11 +++++------
 2 files changed, 5 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0823cd6a..e90ec387 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,10 +11,6 @@ jobs:
     # Pushes should only run on mainline branch "development"
     if: github.event_name == 'push' && github.repository == 'AMReX-Codes/pyamrex' && github.ref == 'refs/heads/development'
     name: 🔄 Update Stub Files
-    permissions:
-      # Give the default GITHUB_TOKEN write permission to commit and push the
-      # changed files back to the repository.
-      contents: write
     uses: ./.github/workflows/stubs.yml
 
   ubuntu:
diff --git a/.github/workflows/stubs.yml b/.github/workflows/stubs.yml
index 65897a2c..2faab3e0 100644
--- a/.github/workflows/stubs.yml
+++ b/.github/workflows/stubs.yml
@@ -2,7 +2,11 @@ name: 🔄 Update Stub Files
 
 # This workflow updates the .pyi stub files for documentation and interactive use.
 
-on: [workflow_call]
+on:
+  workflow_call:
+    secrets:
+        PYAMREX_PUSH_TOKEN:
+          required: true
 
 concurrency:
   group: ${{ github.ref }}-${{ github.head_ref }}-stubs
@@ -19,11 +23,6 @@ jobs:
       CXXFLAGS: "-O1"
       OMP_NUM_THREAD: 2
 
-    permissions:
-      # Give the default GITHUB_TOKEN write permission to commit and push the
-      # changed files back to the repository.
-      contents: write
-
     steps:
     - uses: actions/checkout@v3
       with: