[BUG] Using permissions key to set GITHUB_TOKEN when running the action

[sgibson91]

Summary

At the minute, I pass a PAT with public_repo scope to test-this-pr-action which allows me to push a new branch to a repo I have write access to and leave a comment on the open PR.

I was playing around with setting the permissions of the GITHUB_TOKEN to see if I could grant it just enough to do the above instead of my account. The following permissions can create the branch and leave the comment:

permissions:
  contents: write
  pulls-requests: write

But seemingly with these permissions to push to a branch, does not seem to trigger the a separate action that is set to trigger on pushes to main and test-this-pr/** branches. Seems counter-intuitive to me!

I have been testing the action in this repo: https://github.com/binderhub-test-org/pr-test

Refs:

• https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#jobsjob_idpermissions

[sgibson91]

Hmmm, maybe this is not allowed https://docs.github.com/en/actions/reference/events-that-trigger-workflows#triggering-new-workflows-using-a-personal-access-token

[sgibson91]

This is something that could be permitted with the use of reusable workflows https://docs.github.com/en/actions/learn-github-actions/reusing-workflows