From 9d4fb0c40f9b8554723d6f67b60fc0ef562c6766 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 19 Aug 2025 16:01:25 +0200
Subject: [PATCH] workflows/push: remove unused permissions and secrets

These were left-over from when the eval workflow still had the labeling
and reviewer components.
---
 .github/workflows/eval.yml | 2 --
 .github/workflows/pr.yml   | 1 -
 .github/workflows/push.yml | 2 --
 3 files changed, 5 deletions(-)

diff --git a/.github/workflows/eval.yml b/.github/workflows/eval.yml
index 7efa71913ac7..0acf37476ecc 100644
--- a/.github/workflows/eval.yml
+++ b/.github/workflows/eval.yml
@@ -18,8 +18,6 @@ on:
     secrets:
       CACHIX_AUTH_TOKEN:
         required: true
-      OWNER_APP_PRIVATE_KEY:
-        required: false
 
 permissions: {}
 
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 3fcb35bfacc7..82fdd1f3aa82 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -80,7 +80,6 @@ jobs:
       statuses: write
     secrets:
       CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
-      OWNER_APP_PRIVATE_KEY: ${{ secrets.OWNER_APP_PRIVATE_KEY }}
     with:
       mergedSha: ${{ needs.prepare.outputs.mergedSha }}
       targetSha: ${{ needs.prepare.outputs.targetSha }}
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 4031c3a9cc6f..e980dbe42951 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -39,8 +39,6 @@ jobs:
     # Those are not actually used on push, but will throw an error if not set.
     permissions:
       # compare
-      issues: write
-      pull-requests: write
       statuses: write
     secrets:
       CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}