From 65188b225b96575bad7e0dc1446e808857298c6f Mon Sep 17 00:00:00 2001
From: jeffreyhung <17494876+Jeffreyhung@users.noreply.github.com>
Date: Thu, 26 Mar 2026 10:07:56 -0700
Subject: [PATCH] use default token that is supported by the graphql endpoint

---
 .github/workflows/enforce-draft-pr.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/enforce-draft-pr.yml b/.github/workflows/enforce-draft-pr.yml
index fcbd96be4c..205a20185c 100644
--- a/.github/workflows/enforce-draft-pr.yml
+++ b/.github/workflows/enforce-draft-pr.yml
@@ -9,6 +9,9 @@ jobs:
     name: Enforce Draft PR
     runs-on: ubuntu-24.04
     if: github.event.pull_request.draft == false
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       - name: Generate GitHub App token
         id: app-token
@@ -19,7 +22,7 @@ jobs:
 
       - name: Convert PR to draft
         env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          GH_TOKEN: ${{github.token}}
           PR_URL: ${{ github.event.pull_request.html_url }}
         run: |
           gh pr ready "$PR_URL" --undo