From 4f63c06aba3958d6f654c11b43f4bcc77e05cd86 Mon Sep 17 00:00:00 2001
From: Drew Minnear <dminnear@redhat.com>
Date: Thu, 9 Apr 2026 17:17:27 -0400
Subject: [PATCH] be more explicit about scope of token

---
 .github/workflows/update-metadata.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/update-metadata.yaml b/.github/workflows/update-metadata.yaml
index 270b0eb..02e5cb6 100644
--- a/.github/workflows/update-metadata.yaml
+++ b/.github/workflows/update-metadata.yaml
@@ -24,6 +24,8 @@ jobs:
         with:
           app-id: ${{ vars.METADATA_SYNC_APP_ID }}
           private-key: ${{ secrets.METADATA_SYNC_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: "docs"
 
   update-metadata:
     needs: get-token