ci: fix token permissions (#359)

* ci: try fixing permissions

* Try this

* Undo a change

* Explicit secrets

Author: lachlancollins

.github/changeset-preview/action.yml

@@ -18,5 +18,4 @@ runs:
           --body-file /tmp/changeset-preview.md \
           --marker "<!-- changeset-version-preview -->"
       env:
-        REPOSITORY: ${{ github.repository }}
-        GH_TOKEN: ${{ github.token }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/changeset-preview/upsert-pr-comment.mjs

@@ -26,7 +26,7 @@ function parseArgs(argv) {
     bodyFile: values['body-file'],
     repo: values.repo ?? process.env.GITHUB_REPOSITORY,
     marker: values.marker ?? DEFAULT_MARKER,
-    token: values.token ?? (process.env.GITHUB_TOKEN || process.env.GH_TOKEN),
+    token: values.token ?? process.env.GITHUB_TOKEN,
     apiUrl:
       values['api-url'] ??
       (process.env.GITHUB_API_URL || 'https://api.github.com'),

.github/comment-on-release/action.yml

@@ -12,5 +12,4 @@ runs:
       run: node ${{ github.action_path }}/comment-on-release.ts
       env:
         PUBLISHED_PACKAGES: ${{ inputs.published-packages }}
-        REPOSITORY: ${{ github.repository }}
-        GH_TOKEN: ${{ github.token }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}