Missing access for the GITHUB_TOKEN for workflows

[alexvanderberkel]

Select Topic Area

Question

Body

I am working on a GitHub action which synchronizes content from a template repository into decentral repositories. Within the github action we are using different tokens in order to make access to private repositories work. While carrying out a syncrhonization for workflow file I stumbled accross the issue that the permission for the GITHUB_TOKEN cannot be set for updating workflow file.

Error:
refusing to allow a GitHub App to create or update workflow .github/workflows/pr.yamlwithoutworkflowspermission

workflows cannot be set to write apparently and this is a limitation which I would like to have been fixed

https://docs.github.com.mcas.ms/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token#defining-access-for-the-github_token-permissions

permissions:

• actions: read|write|none
• attestations: read|write|none
• checks: read|write|none
• contents: read|write|none
• deployments: read|write|none
• id-token: write|none
• issues: read|write|none
• discussions: read|write|none
• packages: read|write|none
• pages: read|write|none
• pull-requests: read|write|none
• repository-projects: read|write|none
• security-events: read|write|none
• statuses: read|write|none

This is possible for "normal" GitHub actions on the permissions config. Why is this not possible for the default github_token?

Thanks for your help,
Alex