ci: use fossifybot github app token (#402)

.github/workflows/foss-release.yml

@@ -5,9 +5,6 @@ on:
     tags:
       - "*.*.*"
 
-permissions:
-  contents: read
-
 jobs:
   call-release-workflow:
     uses: FossifyOrg/.github/.github/workflows/release.yml@main
@@ -15,11 +12,4 @@ jobs:
       tag: ${{ github.ref_name }}
       flavor: "foss"
       package_name: "org.fossify.messages"
-
+    secrets: inherit
-    secrets:
-      ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
-      SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
-      SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
-      SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}
-      SERVICE_ACCOUNT_JSON_KEY_BASE64: ""
-      FOSSIFYBOT_TOKEN: ${{ secrets.FOSSIFYBOT_TOKEN }}

.github/workflows/gplay-release.yml

@@ -24,9 +24,6 @@ on:
         type: boolean
         default: false
 
-permissions:
-  contents: read
-
 jobs:
   call-release-workflow:
     uses: FossifyOrg/.github/.github/workflows/release.yml@main
@@ -36,11 +33,4 @@ jobs:
       track: ${{ github.event.inputs.track }}
       rollout: ${{ github.event.inputs.rollout }}
       validate_only: ${{ github.event.inputs.validate_only == 'true' }}
-
+    secrets: inherit
-    secrets:
-      ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
-      SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
-      SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
-      SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}
-      SERVICE_ACCOUNT_JSON_KEY_BASE64: ${{ secrets.SERVICE_ACCOUNT_JSON_KEY_BASE64 }}
-      FOSSIFYBOT_TOKEN: ""

.github/workflows/image-minimizer.yml

@@ -11,5 +11,4 @@ on:
 jobs:
   call-image-minimizer-workflow:
     uses: FossifyOrg/.github/.github/workflows/image-minimizer.yml@main
-    secrets:
+    secrets: inherit
-      FOSSIFYBOT_TOKEN: ${{ secrets.FOSSIFYBOT_TOKEN }}

.github/workflows/no-response.yml

@@ -2,11 +2,10 @@ name: No Response
 
 on:
   schedule:
-    - cron: '0 12 * * *' # Runs daily at noon
+    - cron: "0 12 * * *" # Runs daily at noon
   workflow_dispatch:
 
 jobs:
   call-no-response-workflow:
     uses: FossifyOrg/.github/.github/workflows/no-response.yml@main
-    secrets:
+    secrets: inherit
-      FOSSIFYBOT_TOKEN: ${{ secrets.FOSSIFYBOT_TOKEN }}

.github/workflows/pr-labeler.yml

@@ -4,12 +4,7 @@ on:
   pull_request_target:
     types: [opened]
 
-permissions:
-  contents: read
-  # write permission is not required as FOSSIFYBOT_TOKEN is used
-
 jobs:
   call-pr-labeler-workflow:
     uses: FossifyOrg/.github/.github/workflows/pr-labeler.yml@main
-    secrets:
+    secrets: inherit
-      FOSSIFYBOT_TOKEN: ${{ secrets.FOSSIFYBOT_TOKEN }}

.github/workflows/release-commenter.yml

@@ -4,14 +4,7 @@ on:
   release:
     types: [published]
 
-permissions:
-  contents: read
-  issues: read
-  pull-requests: read
-  # write permission is not required as FOSSIFYBOT_TOKEN is used
-
 jobs:
   call-release-commenter:
     uses: FossifyOrg/.github/.github/workflows/release-commenter.yml@main
-    secrets:
+    secrets: inherit
-      FOSSIFYBOT_TOKEN: ${{ secrets.FOSSIFYBOT_TOKEN }}