Switch reviewdog to a bespoke secret. (#3757)

This uses a token from the low-privilege CarbonInfraBot, which should allow us to separate out permission for Google's CLA bot.
2026-09-24 22:02:23 +01:00 · 2024-03-08 16:41:36 +00:00
parent 096daecc57
commit 1d2b7db482
1 changed files with 2 additions and 1 deletions
@@ -47,7 +47,8 @@ jobs:
      # matching the diff that pre-commit created.
      - name: Create suggestions
        env:
-          REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          REVIEWDOG_GITHUB_API_TOKEN:
+            ${{ secrets.CARBON_INFRA_BOT_FOR_REVIEWDOG }}
        run: |
          cat ./diff | \
          GITHUB_EVENT_PATH=./event \