add git token to the update

Author: kgraeper

.github/workflows/test_integration.yml

@@ -51,7 +51,7 @@ jobs:
             disk-cache: ${{ github.workflow }}
             # Share repository cache between workflows.
             repository-cache: true
-        - name: Bazel build targets
+        - name: Update known good commits
           run: |
             echo "::group::get latest commits from main branches"
             python3 tools/update_module_latest.py --output known_good.updated.json
@@ -61,6 +61,10 @@ jobs:
             python3 tools/update_module_from_known_good.py --known known_good.updated.json
             cat score_modules.MODULE.bazel
             echo "::endgroup::"
+          env:
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        - name: Bazel build targets
+          run: |
             ./integration_test.sh
         - name: Show disk space after build
           if: always()

integration_test.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-set -euox pipefail
+set -euo pipefail
 
 # Integration build script.
 # Captures warning counts for regression tracking.
@@ -52,9 +52,10 @@ for group in "${!BUILD_TARGET_GROUPS[@]}"; do
     log_file="${LOG_DIR}/${group}.log"
     # Log build group banner only to stdout/stderr (not into summary table file)
     echo "--- Building group: ${group} ---"
+    start_ts=$(date +%s)
+    echo "bazel build --config "${CONFIG}" ${targets} --verbose_failures"
     # GitHub Actions log grouping start
     echo "::group::Bazel build (${group})"
-    start_ts=$(date +%s)
     set +e
     bazel build --config "${CONFIG}" ${targets} --verbose_failures 2>&1 | tee "$log_file"
     build_status=${PIPESTATUS[0]}