From 0dfab8f3df518ed6364eb4e7d09f2475b93ff700 Mon Sep 17 00:00:00 2001 From: "James M. Greene" Date: Fri, 10 Sep 2021 16:47:39 -0500 Subject: [PATCH] Use @docs-bot for deployment environment cleanup (#21441) * Restrict stale app cleanup to GITHUB_TOKEN * Use DOCS_BOT token for stale environment cleanup --- .github/workflows/remove-stale-staging-resources.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/remove-stale-staging-resources.yml b/.github/workflows/remove-stale-staging-resources.yml index b99806c6b1..b55a28e9ed 100644 --- a/.github/workflows/remove-stale-staging-resources.yml +++ b/.github/workflows/remove-stale-staging-resources.yml @@ -15,7 +15,6 @@ on: permissions: contents: read - deployments: write pull-requests: read jobs: @@ -40,7 +39,7 @@ jobs: run: script/remove-stale-staging-apps.js env: HEROKU_API_TOKEN: ${{ secrets.HEROKU_API_TOKEN }} - GITHUB_TOKEN: ${{ secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} remove_stale_staging_envs: name: Remove stale staging environments @@ -61,5 +60,5 @@ jobs: - name: Run script run: script/remove-stale-staging-envs.js env: - GITHUB_TOKEN: ${{ secrets.DOCUBOT_FR_PROJECT_BOARD_WORKFLOWS_REPO_ORG_READ_SCOPES }} + GITHUB_TOKEN: ${{ secrets.DOCS_BOT }} REPO: ${{ github.repository }}