Add workflow scope to github.rb

[mindfulmonk]

I've recently tried bumping a cask version and got a recommendation to create a token with this message:

Or create a personal access token:
  https://github.com/settings/tokens/new?scopes=gist,public_repo&description=Homebrew

As it was missing the workflow scope the bump failed.

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your changes? Here's an example.
• Have you successfully run brew style with your changes locally?
• Have you successfully run brew typecheck with your changes locally?
• Have you successfully run brew tests with your changes locally?
• Have you successfully run brew man locally and committed any changes?

---

[nandahkrishna]

Question because I'm unaware, but would the workflow scope be necessary to bump versions? From the docs:

Grants the ability to add and update GitHub Actions workflow files. Workflow files can be committed without this scope if the same file (with both the same path and contents) exists on another branch in the same repository. Workflow files can expose GITHUB_TOKEN which may have a different set of scopes, see https://docs.github.com/en/free-pro-team@latest/actions/reference/authentication-in-a-workflow#permissions-for-the-github_token for details.

Hope this isn't from some incorrect error-handling added in #10490.

[mindfulmonk]

I've got the following message, when I didn't have the workflow scope on the token:

To https://github.com/mindfulmonk/homebrew-cask.git
 ! [remote rejected]       bump-rekordbox-6.5.0-20210127201749 -> bump-rekordbox-6.5.0-20210127201749 (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/automerge.yml` without `workflow` scope)

[MikeMcQuaid]

@mindfulmonk Please rebase this on origin/master; we had to change the CI configuration. Thanks!

[mindfulmonk]

Looks like I've hit isaacs/github#168 closing this in favour of #10568