From 16ba6fa04fecc0999c521b71ffdd31919c686ea9 Mon Sep 17 00:00:00 2001
From: Pavel Vetokhin <pavetok@users.noreply.github.com>
Date: Sun, 10 Sep 2023 10:35:29 +0300
Subject: [PATCH] Polish template sync workflow (#113)

---
 .github/dependabot.yml                      |  4 ++--
 .github/workflows/pipeline-beyond-doubt.yml |  2 --
 .github/workflows/project-template.yml      | 12 ++++++++++--
 .github/workflows/solution-beyond-doubt.yml |  1 -
 4 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8a874812..43cdf913 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -35,11 +35,11 @@ updates:
     schedule:
       interval: "weekly"
   - package-ecosystem: "pip"
-    directory: "/.env/green"
+    directory: "/.environs/green"
     schedule:
       interval: "weekly"
   - package-ecosystem: "pip"
-    directory: "/.env/amber"
+    directory: "/.environs/amber"
     schedule:
       interval: "weekly"
     ignore:
diff --git a/.github/workflows/pipeline-beyond-doubt.yml b/.github/workflows/pipeline-beyond-doubt.yml
index d9a5fb24..47e6db9f 100644
--- a/.github/workflows/pipeline-beyond-doubt.yml
+++ b/.github/workflows/pipeline-beyond-doubt.yml
@@ -21,9 +21,7 @@ jobs:
             os: ubuntu-20.04
     runs-on: ${{ matrix.environ.os }}
     permissions:
-      checks: write
       packages: write
-      pull-requests: write
     steps:
       - uses: actions/checkout@v4.0.0
       - uses: ./.github/actions/prepare
diff --git a/.github/workflows/project-template.yml b/.github/workflows/project-template.yml
index 3ec2099e..776bc2e7 100644
--- a/.github/workflows/project-template.yml
+++ b/.github/workflows/project-template.yml
@@ -9,9 +9,17 @@ jobs:
     name: Syncing
     runs-on: ubuntu-22.04
     steps:
+      - id: orgbot
+        uses: tibdex/github-app-token@v1.9.0
+        with:
+          app_id: ${{ secrets.ORGBOT_APP_ID }}
+          private_key: ${{ secrets.ORGBOT_PRIVATE_KEY }}
       - uses: actions/checkout@v4.0.0
+        with:
+          token: ${{ steps.orgbot.outputs.token }}
       - uses: AndreasAugustin/actions-template-sync@v1.1.2
         with:
-          source_repo_path: smecalculus/bezmen
           upstream_branch: main
-          github_token: ${{ secrets.BEZMEN_PAT }}
+          source_repo_path: smecalculus/bezmen
+          github_token: ${{ steps.orgbot.outputs.token }}
+          pr_title: Syncing with project template
diff --git a/.github/workflows/solution-beyond-doubt.yml b/.github/workflows/solution-beyond-doubt.yml
index 0e3aff89..c921339e 100644
--- a/.github/workflows/solution-beyond-doubt.yml
+++ b/.github/workflows/solution-beyond-doubt.yml
@@ -34,7 +34,6 @@ jobs:
     permissions:
       checks: write
       packages: write
-      pull-requests: write
     steps:
       - uses: actions/checkout@v4.0.0
       - uses: ./.github/actions/prepare