Use org-level GIT_TOKEN for brew tap update

xataio · Dec 8, 2023 · 38e2cc7 · 38e2cc7
1 parent 9efe215
commit 38e2cc7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -139,6 +139,11 @@ jobs:
         version: latest
         args: release --clean
       env:
+        # We use two github tokens here:
+        # * The actions-bound `GITHUB_TOKEN` with permissions to write packages.
+        # * The org level `GIT_TOKEN` to be able to publish the brew tap file.
+        # See: https://goreleaser.com/errors/resource-not-accessible-by-integration/
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        TAP_GITHUB_TOKEN: ${{ secrets.GIT_TOKEN }}
         GITHUB_USERNAME: ${{ github.repository_owner }}
         DOCKER_USERNAME: ghcr.io/${{ github.repository_owner }}