From 79344c653dfc6374fdec26ffa9568964a72c0d34 Mon Sep 17 00:00:00 2001
From: Colin McDonnell <colinmcd94@gmail.com>
Date: Mon, 12 Jan 2026 23:19:35 -0800
Subject: [PATCH] Fix CI

---
 .github/workflows/trigger-sync.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/trigger-sync.yml b/.github/workflows/trigger-sync.yml
index 12b6d04..7ee1a75 100644
--- a/.github/workflows/trigger-sync.yml
+++ b/.github/workflows/trigger-sync.yml
@@ -4,15 +4,27 @@ on:
   push:
     branches: [main]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   trigger:
     # skip if pushed by our bot (breaks the loop)
     if: github.actor != 'pullfrog[bot]'
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
+
+      - name: Get installation token
+        id: token
+        uses: ./get-installation-token
+        with:
+          repos: pullfrog
+
       - uses: peter-evans/repository-dispatch@v3
         with:
-          token: ${{ secrets.MONOREPO_PAT }}
+          token: ${{ steps.token.outputs.token }}
           repository: pullfrog/pullfrog
           event-type: action-repo-updated
           client-payload: |