From 6d0592bdb060c7c5da530bebee2a01947ff068da Mon Sep 17 00:00:00 2001
From: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Date: Fri, 17 Apr 2026 23:33:43 -0300
Subject: [PATCH] ci: improve PAT usage

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
---
 .github/workflows/generate.yml | 2 +-
 .github/workflows/release.yml  | 3 ++-
 .goreleaser.yml                | 4 ++++
 3 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml
index 197df02..ad600cb 100644
--- a/.github/workflows/generate.yml
+++ b/.github/workflows/generate.yml
@@ -29,7 +29,7 @@ jobs:
       - run: "go install github.com/santhosh-tekuri/jsonschema/cmd/jv@latest"
       - run: task docs:releases
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - run: task docs:generate
       - run: task schema:generate
       - run: task schema:validate
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1f3c7d2..8779c06 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,7 +65,8 @@ jobs:
           args: release --clean
           distribution: goreleaser-pro
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_PAT: ${{ secrets.GH_PAT }}
           GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
           TWITTER_CONSUMER_KEY: ${{ secrets.TWITTER_CONSUMER_KEY }}
           TWITTER_CONSUMER_SECRET: ${{ secrets.TWITTER_CONSUMER_SECRET }}
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 7814c67..510872b 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -82,6 +82,7 @@ brews:
   - repository:
       owner: goreleaser
       name: homebrew-tap
+      token: "{{ .Env.GH_PAT }}"
     directory: Formula
     test: |
       system "#{bin}/nfpm -v"
@@ -96,6 +97,7 @@ scoops:
   - repository:
       owner: goreleaser
       name: scoop-bucket
+      token: "{{ .Env.GH_PAT }}"
     directory: bucket
 
 nix:
@@ -103,6 +105,7 @@ nix:
     repository:
       owner: goreleaser
       name: nur
+      token: "{{ .Env.GH_PAT }}"
     path: pkgs/nfpm/default.nix
     extra_install: |-
       installManPage ./manpages/nfpm.1.gz
@@ -116,6 +119,7 @@ winget:
     repository:
       owner: goreleaser
       name: winget-pkgs
+      token: "{{ .Env.GH_PAT }}"
       branch: "nfpm-{{.Version}}"
       pull_request:
         enabled: true