ci: release action security corrections (#96)

Helmholtz-AI-Energy · Oct 25, 2023 · a02a4c1 · a02a4c1
1 parent 4a0c984
commit a02a4c1
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -14,6 +14,7 @@ jobs:
       tag: ${{ steps.semantic-release.outputs.tag }}
     needs: Test
     runs-on: ubuntu-latest
+    environment: release
     concurrency: publish
     permissions:
       contents: write
@@ -22,6 +23,7 @@ jobs:
     - uses: actions/checkout@v4
       with:
         fetch-depth: 0
+        token: ${{ secrets.PERSONAL_GH_TOKEN }}
     - uses: actions/setup-python@v4
     - name: Install dependencies
       run: |
@@ -33,7 +35,7 @@ jobs:
         poetry run semantic-release version --no-vcs-release --skip-build
         cat $GITHUB_OUTPUT
       env:
-        GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+        GH_TOKEN: ${{ secrets.PERSONAL_GH_TOKEN }}
   Release-to-Pypi:
     runs-on: ubuntu-latest
     needs: VersionAndChangelog