gh api needs github token

This commit is contained in:
Erica Portnoy 2026-05-12 11:20:22 -07:00
parent bf65074f44
commit 1dc3139fcd
2 changed files with 7 additions and 2 deletions

View file

@ -118,6 +118,7 @@ jobs:
# jobs, failure() returns true if any ancestor job fails.
if: failure() && (needs.re-run.result == 'skipped' || needs.re-run.result == 'failure')
uses: "./.github/workflows/notify_nightly.yml"
permissions: {}
permissions:
actions: read
secrets:
MATTERMOST_PUBLIC_CERTBOT_CHANNEL_WEBHOOK: "${{ secrets.MATTERMOST_PUBLIC_CERTBOT_CHANNEL_WEBHOOK }}"

View file

@ -6,11 +6,15 @@ on:
MATTERMOST_PUBLIC_CERTBOT_CHANNEL_WEBHOOK:
required: true
permissions: {}
permissions:
actions: read
jobs:
notify_mattermost:
name: Notify mattermost
runs-on: ubuntu-latest
env:
GH_TOKEN: ${{ github.token }}
steps:
# we pin this action to a version tested and audited by certbot's
# maintainers for extra security. the full hash is used as doing so is