🤖 updated file(s)

Author: conda-bot

.github/workflows/update.yml

@@ -1,8 +1,5 @@
 name: Update Repository
 
-# Deny all permissions by default
-permissions: {}
-
 on:
   # every Sunday at 00:36 UTC
   # https://crontab.guru/#36_2_*_*_0
@@ -32,10 +29,6 @@ jobs:
         )
       )
     runs-on: ubuntu-latest
-    permissions:
-      contents: write        # for committing changes
-      pull-requests: write   # for creating pull requests
-      issues: write          # for commenting on issues
     steps:
       - if: github.event_name == 'issue_comment'
         uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
@@ -47,19 +40,15 @@ jobs:
 
       - if: github.event.comment.body == '@conda-bot render'
         name: Configure git origin
-        env:
-          REPOSITORY: ${{ github.event.issue.pull_request.head.repo.full_name }}
-          REF: ${{ github.event.issue.pull_request.head.ref }}
         run: |
-          echo "REPOSITORY=${REPOSITORY}" >> $GITHUB_ENV
-          echo "REF=${REF}" >> $GITHUB_ENV
+          echo REPOSITORY=$(curl --silent ${{ github.event.issue.pull_request.url }} | jq --raw-output '.head.repo.full_name') >> $GITHUB_ENV
+          echo REF=$(curl --silent ${{ github.event.issue.pull_request.url }} | jq --raw-output '.head.ref') >> $GITHUB_ENV
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           repository: ${{ env.REPOSITORY || github.repository }}
           ref: ${{ env.REF || '' }}
           token: ${{ secrets.SYNC_TOKEN }}
-          persist-credentials: false
 
       - name: Configure git user
         run: |