From 3ee195fde604467abdc7662804e6e03ce5c465de Mon Sep 17 00:00:00 2001 From: maleo Date: Tue, 31 Oct 2023 14:33:40 +0000 Subject: [PATCH] Revert to using PAT for writing images The maximum permissions of GITHUB_TOKEN secret for pull requests from public forked repositories are read according to the [docs](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token). --- .github/workflows/test.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 7e923a7..3240e24 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -1,7 +1,6 @@ name: tests on: push: - branches: [ main ] pull_request: branches: [ main ] concurrency: testing @@ -24,8 +23,8 @@ jobs: uses: docker/login-action@v2 with: registry: ghcr.io - username: ${{ github.repository_owner }} - password: ${{ secrets.GITHUB_TOKEN }} + username: ${{ github.actor }} + password: ${{ secrets.PAT_TOKEN }} - name: lower case repository_owner id: lower_case_repository_owner uses: ASzc/change-string-case-action@v2 @@ -57,8 +56,8 @@ jobs: uses: docker/login-action@v2 with: registry: ghcr.io - username: ${{ github.repository_owner }} - password: ${{ secrets.GITHUB_TOKEN }} + username: ${{ github.actor }} + password: ${{ secrets.PAT_TOKEN }} - name: lower case repository_owner id: lower_case_repository_owner uses: ASzc/change-string-case-action@v2