From 07ba2550733b21598f5846e392844e649c48f372 Mon Sep 17 00:00:00 2001
From: Mark Backman <mark@daily.co>
Date: Mon, 2 Mar 2026 09:20:24 -0500
Subject: [PATCH] Fix update-docs workflow OIDC failure with
 pull_request_target

The switch from pull_request to pull_request_target (for fork PR
secret access) broke claude-code-action default OIDC-based GitHub
App authentication. Pass github_token explicitly to bypass OIDC.
---
 .github/workflows/update-docs.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/update-docs.yml b/.github/workflows/update-docs.yml
index a9066762d..d26862766 100644
--- a/.github/workflows/update-docs.yml
+++ b/.github/workflows/update-docs.yml
@@ -59,6 +59,7 @@ jobs:
           DOCS_SYNC_TOKEN: ${{ secrets.DOCS_SYNC_TOKEN }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           prompt: |
             You are updating documentation for the pipecat-ai/docs repository based on
             changes merged in PR #${{ steps.pr.outputs.number }} of pipecat-ai/pipecat.