fix(Brewforge#49): github actions permission denied

Author: Oscaner

.github/actions/bump-casks/action.yml

@@ -12,9 +12,14 @@ runs:
     - name: Bump outdated casks
       # continue-on-error: true
       env:
+        HOMEBREW_DEVELOPER: '1'
         HOMEBREW_GITHUB_API_TOKEN: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
       shell: bash
+      # https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28#primary-rate-limit-for-authenticated-users
+      # Github Actions: 5000 requests per hour
+      # 1 * 60 * 24 = 1440 (because bump-pr will checkout a new branch and push to remote)
+      # 1 concurrent parallel jobs, 1 second delay between jobs.
       run: |
-        parallel -j0 --group --halt now,fail=1 \
-          './.github/actions/bump-casks/script.sh {}' \
+        parallel -j1 --delay 1s --group --halt now,fail=1 \
+          "./.github/actions/bump-casks/script.sh {}" \
           ::: $(ls $(brew --repository brewforge/chinese)/Casks/*.rb | xargs -I {} basename {} .rb)

.github/actions/bump-formulas/action.yml

@@ -12,9 +12,14 @@ runs:
     - name: Bump outdated formulas
       # continue-on-error: true
       env:
+        HOMEBREW_DEVELOPER: '1'
         HOMEBREW_GITHUB_API_TOKEN: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
       shell: bash
+      # https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28#primary-rate-limit-for-authenticated-users
+      # Github Actions: 5000 requests per hour
+      # 1 * 60 * 24 = 1440 (because bump-pr will checkout a new branch and push to remote)
+      # 1 concurrent parallel jobs, 1 second delay between jobs.
       run: |
-        parallel -j0 --group --halt now,fail=1 \
-          './.github/actions/bump-formulas/script.sh {}' \
+        parallel -j1 --delay 1s --group --halt now,fail=1 \
+          "./.github/actions/bump-formulas/script.sh {}" \
           ::: $(ls $(brew --repository brewforge/chinese)/Formula/*.rb | xargs -I {} basename {} .rb)

.github/actions/homebrew-env/action.yml

@@ -16,14 +16,22 @@ runs:
         core: true
         cask: true
         test-bot: false
+        token: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
 
-    - name: Add parallel cli
+    # Homebrew/actions/setup-homebrew will checkout the main branch.
+    # re-checkout myself.
+    - uses: actions/checkout@v3
+
+    - name: Necessary clis
       shell: bash
       run: |
         brew install parallel
         # makesure brew livecheck works
         brew livecheck parallel
 
+        brew install coreutils
+        brew link --overwrite coreutils
+
     - name: Add Tap
       env:
         HOMEBREW_GITHUB_API_TOKEN: ${{ inputs.HOMEBREW_GITHUB_API_TOKEN }}
@@ -32,3 +40,4 @@ runs:
         brew tap brewforge/chinese
         brew update
         brew install ripgrep sd
+        brew install-bundler-gems --groups "audit,style"

.github/workflows/main.yml .github/workflows/schedule.yml

@@ -1,8 +1,8 @@
-name: CI
+name: schedule
 
 on:
-  pull_request:
-    branches: [main, bump-*]
+  # pull_request:
+  #   branches: [main]
   push:
     branches: [fix-*]
   schedule:
@@ -11,7 +11,9 @@ on:
     # Every day at 6am
     - cron: "0 6 * * *"
   # allow run manually
-  workflow_dispatch: {}
+  workflow_dispatch:
+
+permissions: write-all
 
 jobs:
   casks: