Attempt 3.

.github/actions/download-artifacts/action.yml

@@ -4,7 +4,6 @@ description: Download dependencies (artifacts)
 
 inputs:
   device: {type: string, required: true}
-  gh-pat: {type: string, required: true}
   git_sha: {type: string, required: true}
 
 runs:
@@ -25,7 +24,6 @@ runs:
         path: .artifacts-dl
         repo: nv-legate/legate.core
         commit: ${{ inputs.git_sha }}
-        github_token: "${{ inputs.gh-pat }}"
         workflow_conclusion: success
         workflow: "ci-gh-${{ inputs.device }}-build-and-test.yml"
         name: "legate.core-${{ inputs.device }}-[0-9a-z]{40}"

.github/workflows/gh-build.yml

@@ -37,7 +37,8 @@ jobs:
         SCCACHE_BUCKET: "rapids-sccache-devs"
         SCCACHE_S3_KEY_PREFIX: "legate-cunumeric-dev"
         USE_CUDA: "${{ inputs.device == 'gpu' && 'ON' || 'OFF' }}"
-        GH_TOKEN: "${{ secrets.PERSONAL_ACCESS_TOKEN || github.token }}"
+        GH_TOKEN: "${{ env.GH_TOKEN }}"
+        GITHUB_TOKEN: "${{ env.GITHUB_TOKEN }}"
         VAULT_HOST: "${{ github.repository_owner != 'nv-legate' && 'https://vault.ops.k8s.rapids.ai' || '' }}"
     defaults:
       run:
@@ -77,7 +78,6 @@ jobs:
         with:
           device: "${{ inputs.device }}"
           git_sha: "${{ steps.legate_core_info.outputs.git_tag }}"
-          gh-pat: "${{ secrets.PERSONAL_ACCESS_TOKEN || github.token }}"
 
       - if: github.repository_owner == 'nv-legate'
         name: Get AWS credentials for sccache bucket