Use the built-in GITHUB_TOKEN rather than relying on a PAT

.github/workflows/automerge.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Automerge
         uses: pascalgn/automerge-action@v0.13.1
         env:
-          GITHUB_TOKEN: "${{ secrets.GH_PAT }}"
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
           MERGE_LABELS: "merge,!work in progress,!wip"
           MERGE_REMOVE_LABELS: "merge"
           MERGE_METHOD: "merge"
@@ -32,4 +32,4 @@ jobs:
         with:
           branches: "!master, !production, *"
         env:
-          GITHUB_TOKEN: "${{ secrets.GH_PAT }}"
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/cla.yml

@@ -12,8 +12,8 @@ jobs:
         if: (github.event.comment.body == 'recheckcla' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
         uses: cla-assistant/github-action@master
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
-          PERSONAL_ACCESS_TOKEN: ${{ secrets.GH_PAT }}
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+          PERSONAL_ACCESS_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
         with:
           path-to-signatures: cla-signatures.json
           path-to-document: https://github.com/koj-co/.github/blob/master/CLA.md

.github/workflows/dependabot.yml

@@ -10,6 +10,6 @@ jobs:
     steps:
       - uses: koj-co/dependabot-pr-action@master
         with:
-          token: ${{ secrets.GH_PAT }}
+          token: "${{ secrets.GITHUB_TOKEN }}"
           merge-minor: true
           merge-patch: true

.github/workflows/labeler.yml

@@ -9,10 +9,10 @@ jobs:
       - name: Label all PRs
         uses: actions/labeler@master
         with:
-          repo-token: "${{ secrets.GH_PAT }}"
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Label approved PRs
         uses: koj-co/label-approved-action@master
         with:
           labels: "merge"
         env:
-          GITHUB_TOKEN: "${{ secrets.GH_PAT }}"
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/node.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Release
         run: npx semantic-release
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GIT_AUTHOR_NAME: "Koj Bot"
           GIT_AUTHOR_EMAIL: "bot@koj.co"
@@ -50,15 +50,15 @@ jobs:
         uses: jonabc/licensed-ci@v1
         with:
           config_file: .github/licensed.yml
-          github_token: ${{ secrets.GH_PAT }}
+          github_token: "${{ secrets.GITHUB_TOKEN }}"
           user_name: "KojBot"
           user_email: "bot@koj.co"
           commit_message: ":page_facing_up: Update dependency license file [skip ci]"
       - name: Add PR comment
         uses: actions/github-script@v3
         if: always() && steps.licensed.outputs.pr_number
         with:
-          github-token: ${{ secrets.GH_PAT }}
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
           script: |
             github.issues.createComment({
               ...context.repo,

.github/workflows/pull-request.yml

@@ -58,7 +58,7 @@ jobs:
         uses: actions/github-script@v3
         id: should-pr
         with:
-          github-token: ${{ secrets.GH_PAT }}
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
           script: |
             return
               context.payload.ref.startsWith("refs/heads/feature") ||
@@ -68,6 +68,6 @@ jobs:
         uses: vsoch/pull-request-action@1.0.15
         if: always() && steps.should-pr.outputs.result
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
           PULL_REQUEST_BRANCH: "master"
           PULL_REQUEST_REVIEWERS: "AnandChowdhary"

.github/workflows/release-scheduler.yml

@@ -10,4 +10,4 @@ jobs:
       - name: Run release-scheduler
         uses: koj-co/release-scheduler@master
         env:
-          GH_PAT: ${{ secrets.GH_PAT }}
+          GH_PAT: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/stale.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/stale@v3
       with:
-        repo-token: ${{ secrets.GH_PAT }}
+        repo-token: "${{ secrets.GITHUB_TOKEN }}"
         stale-issue-message: "⚠️ This issue has not seen any activity in the past 2 months so I'm marking it as stale. I'll close it if it doesn't see any activity in the coming week."
         stale-pr-message: "⚠️ This PR has not seen any activity in the past 2 months so I'm marking it as stale. I'll close it if it doesn't see any activity in the coming week."
         days-before-stale: 60