From 1d2b7db48220a867233a20249198e96977ec67d7 Mon Sep 17 00:00:00 2001
From: Jon Ross-Perkins <jperkins@google.com>
Date: Fri, 8 Mar 2024 08:41:36 -0800
Subject: [PATCH] Switch reviewdog to a bespoke secret. (#3757)

This uses a token from the low-privilege CarbonInfraBot, which should
allow us to separate out permission for Google's CLA bot.
---
 .github/workflows/pre_commit_suggestions.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pre_commit_suggestions.yaml b/.github/workflows/pre_commit_suggestions.yaml
index 2d3502c8dab4..c738a9299073 100644
--- a/.github/workflows/pre_commit_suggestions.yaml
+++ b/.github/workflows/pre_commit_suggestions.yaml
@@ -47,7 +47,8 @@ jobs:
       # matching the diff that pre-commit created.
       - name: Create suggestions
         env:
-          REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REVIEWDOG_GITHUB_API_TOKEN:
+            ${{ secrets.CARBON_INFRA_BOT_FOR_REVIEWDOG }}
         run: |
           cat ./diff | \
           GITHUB_EVENT_PATH=./event \