Merge pull request #17 from sbt/wip/token

Add token rights?

Author: eed3si9n

.github/workflows/update-default.yml

@@ -6,6 +6,9 @@ jobs:
   update_default:
     runs-on: ubuntu-latest
     timeout-minutes: 3
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
       - id: update_default
@@ -22,9 +25,12 @@ jobs:
           else
             echo "pushed=false" >> $GITHUB_OUTPUT
           fi
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions/github-script@v7
         if: steps.update_default.outputs.pushed == 'true'
         with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             await github.rest.pulls.create({
               owner: context.repo.owner,