From 4ec65688a564c608f1a6a37e4c872a0989200be9 Mon Sep 17 00:00:00 2001
From: Luke Cartey <5377966+lcartey@users.noreply.github.com>
Date: Thu, 14 Aug 2025 09:53:42 +0100
Subject: [PATCH] Update CodeQL workflow to include GH_TOKEN

It's required for using the gh cli command.
---
 .github/workflows/update-codeql.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/update-codeql.yml b/.github/workflows/update-codeql.yml
index 813bb914..228d3bb1 100644
--- a/.github/workflows/update-codeql.yml
+++ b/.github/workflows/update-codeql.yml
@@ -21,6 +21,8 @@ jobs:
 
         - name: Check latest CodeQL CLI version and update qlt.conf.json
           id: check-version
+          env:
+            GH_TOKEN: ${{ github.token }}
           run: |
             echo "Checking latest CodeQL CLI version"
             current_version=$(jq .CodeQLCLI qlt.conf.json -r)
@@ -106,4 +108,4 @@ jobs:
                 - Upgraded all CodeQL pack lock files using `codeql pack upgrade`
             commit-message: "Upgrade CodeQL CLI dependency to ${{ steps.check-version.outputs.latest_version_tag }}"
             delete-branch: true
-            branch: "codeql/upgrade-to-${{ steps.check-version.outputs.latest_version_tag }}"
\ No newline at end of file
+            branch: "codeql/upgrade-to-${{ steps.check-version.outputs.latest_version_tag }}"