From 70c05fff57473362a352f84a97e06487cd087be1 Mon Sep 17 00:00:00 2001
From: Josh Hunt <joshhunt@users.noreply.github.com>
Date: Thu, 27 Jul 2023 14:27:20 +0000
Subject: [PATCH] =?UTF-8?q?Chore:=20use=20GITHUB=5FTOKEN=20in=20breaking?=
 =?UTF-8?q?=20changes=20workflow=20instead=20of=20grot=20=E2=80=A6=20(#724?=
 =?UTF-8?q?38)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Chore: use GITHUB_TOKEN in breaking changes workflow instead of grot token
---
 .../detect-breaking-changes-report.yml          | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/detect-breaking-changes-report.yml b/.github/workflows/detect-breaking-changes-report.yml
index 397729aad36..f69a58417f7 100644
--- a/.github/workflows/detect-breaking-changes-report.yml
+++ b/.github/workflows/detect-breaking-changes-report.yml
@@ -5,6 +5,9 @@ on:
     workflows: ["Levitate / Detect breaking changes"]
     types: [completed]
 
+permissions:
+  pull-requests: write
+
 jobs:
   notify:
     name: Report
@@ -35,7 +38,7 @@ jobs:
               run_id: runId,
           });
           const artifact = artifacts.data.artifacts.find(a => a.name === artifactName);
-        
+
           if (!artifact) {
               throw new Error(`Could not find artifact ${ artifactName } in workflow (${ runId })`);
           }
@@ -49,11 +52,11 @@ jobs:
 
           fs.mkdirSync(artifactFolder, { recursive: true });
           fs.writeFileSync(`${ artifactFolder }/${ artifactName }.zip`, Buffer.from(download.data));
-        
+
     # Unzip artifact
     - name: Unzip artifact
       run: unzip "${ARTIFACT_FOLDER}/${ARTIFACT_NAME}.zip" -d "${ARTIFACT_FOLDER}"
-    
+
      # Parse the artifact and register fields as step output variables
       # (All fields in the JSON will be available as ${{ steps.levitate-run.outputs.<field-name> }}
     - name: Parsing levitate result
@@ -137,7 +140,7 @@ jobs:
       env:
         PR_NUMBER: ${{ steps.levitate-run.outputs.pr_number }}
       with:
-        github-token: ${{ secrets.GH_BOT_ACCESS_TOKEN }}
+        github-token: ${{ secrets.GITHUB_TOKEN }}
         script: |
           await github.rest.issues.addLabels({
             issue_number: process.env.PR_NUMBER,
@@ -153,7 +156,7 @@ jobs:
       env:
         PR_NUMBER: ${{ steps.levitate-run.outputs.pr_number }}
       with:
-        github-token: ${{ secrets.GH_BOT_ACCESS_TOKEN }}
+        github-token: ${{ secrets.GITHUB_TOKEN }}
         script: |
           await github.rest.issues.removeLabel({
             issue_number: process.env.PR_NUMBER,
@@ -171,7 +174,7 @@ jobs:
       env:
         PR_NUMBER: ${{ steps.levitate-run.outputs.pr_number }}
       with:
-        github-token: ${{ secrets.GH_BOT_ACCESS_TOKEN }}
+        github-token: ${{ secrets.GITHUB_TOKEN }}
         script: |
           await github.rest.pulls.requestReviewers({
             pull_number: process.env.PR_NUMBER,
@@ -188,7 +191,7 @@ jobs:
       env:
         PR_NUMBER: ${{ steps.levitate-run.outputs.pr_number }}
       with:
-        github-token: ${{ secrets.GH_BOT_ACCESS_TOKEN }}
+        github-token: ${{ secrets.GITHUB_TOKEN }}
         script: |
           await github.rest.pulls.removeRequestedReviewers({
             pull_number: process.env.PR_NUMBER,