From cfe92fb40b69b915cc14225cbb6afa32b2402c2d Mon Sep 17 00:00:00 2001
From: MattIPv4 <me@mattcowley.co.uk>
Date: Sun, 22 Mar 2026 13:44:23 +0000
Subject: [PATCH] ci: use custom token for auto-merge

---
 .github/workflows/auto-merge.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index b9694a4a573ce..6debf9b5fed4d 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -16,11 +16,6 @@ jobs:
     name: Auto-merge
     if: github.repository == 'nodejs/nodejs.org'
     runs-on: ubuntu-latest
-    permissions:
-      # Required to approve and merge pull requests
-      pull-requests: write
-      # Required to merge pull requests via merge queue
-      contents: write
 
     steps:
       - name: Harden Runner
@@ -31,3 +26,4 @@ jobs:
       - uses: nodejs/web-team/actions/auto-merge-prs@b087df186d25f8792fb85cc7794f68718726b8ee
         with:
           merge-method: queue
+          github-token: ${{ secrets.AUTO_MERGE_GITHUB_TOKEN }} # zizmor: ignore[secrets-outside-env]