From 6ff423647880f0418e8f40409851971dd687a042 Mon Sep 17 00:00:00 2001
From: Tomo Suzuki <suztomo@gmail.com>
Date: Fri, 4 Sep 2026 19:42:46 +0000
Subject: [PATCH] chore(ci): use YOSHI_CODE_BOT_TOKEN for tag generator
 workflow

Revert #1321 now that yoshi-code-bot account permissions have been configured in the repository.

Using YOSHI_CODE_BOT_TOKEN allows release tags pushed by the workflow to trigger downstream release workflows, which are otherwise suppressed when pushed with GITHUB_TOKEN.
---
 .github/workflows/tag-generators.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tag-generators.yml b/.github/workflows/tag-generators.yml
index 20e130978..9755e47ab 100644
--- a/.github/workflows/tag-generators.yml
+++ b/.github/workflows/tag-generators.yml
@@ -17,15 +17,16 @@ jobs:
     if: ${{ github.repository == 'googleapis/gapic-generator-ruby' }}
     runs-on: ubuntu-latest
     env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      GITHUB_TOKEN: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
     permissions:
       contents: write
       packages: read
     steps:
       - name: Checkout repo
+        # zizmor: ignore[artipacked] - checkout v6 persists credentials safely in RUNNER_TEMP
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.YOSHI_CODE_BOT_TOKEN }}
       - name: Install Ruby 3.4
         uses: ruby/setup-ruby@0dafeac902942906541bc140009cdbf32665b601 # v1.315.0
         with: