From a0941d5fc3f41f65df410ab18b9a1d2786845501 Mon Sep 17 00:00:00 2001
From: Patrik Oldsberg <poldsberg@gmail.com>
Date: Wed, 23 Mar 2022 15:23:45 +0100
Subject: [PATCH] workflows: switch changeset feedback back to service account

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
---
 .github/workflows/automate_changeset_feedback.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/automate_changeset_feedback.yml b/.github/workflows/automate_changeset_feedback.yml
index fff6e95071..7afa66d4b9 100644
--- a/.github/workflows/automate_changeset_feedback.yml
+++ b/.github/workflows/automate_changeset_feedback.yml
@@ -5,10 +5,6 @@ on:
       - opened
       - synchronize
 
-permissions:
-  issues: write
-  pull-requests: write
-
 jobs:
   feedback:
     if: github.repository == 'backstage/backstage' # prevent running on forks
@@ -23,7 +19,7 @@ jobs:
       - name: fetch base
         run: git fetch --depth 1 origin ${{ github.base_ref }}
 
-        # We avoid using the in-source script since this workflow has elevated permissions that we don't want to expose
+        # We avoid using the in-source script just in case
       - name: Generate Feedback
         id: generate-feedback
         run: |
@@ -36,6 +32,7 @@ jobs:
         env:
           ISSUE_NUMBER: ${{ github.event.pull_request.number }}
         with:
+          github-token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }}
           script: |
             const owner = "backstage";
             const repo = "backstage";