coder
diff --git a/‎.github/workflows/aigateway-prices-refresh.yaml‎
Lines changed: 16 additions & 7 deletions b/‎.github/workflows/aigateway-prices-refresh.yaml‎
Lines changed: 16 additions & 7 deletions
@@ -138,16 +138,25 @@ jobs:
           # snapshot each week, so the previous contents are always stale.
           git push --force origin "refs/heads/${REFRESH_BRANCH}"
 
-          pr_number="$(gh pr list --head "${REFRESH_BRANCH}" --base main --state open --json number --jq '.[0].number // empty')"
+          # REST rather than `gh pr list/create/edit`: those go through
+          # GraphQL, whose queries resolve reviewer and team fields that need
+          # the read:org scope. cdrci's token has only repo and workflow, so
+          # they fail as soon as the pull request has a requested reviewer.
+          owner="${GITHUB_REPOSITORY%%/*}"
+          pr_number="$(gh api "repos/${GITHUB_REPOSITORY}/pulls?state=open&base=main&head=${owner}:${REFRESH_BRANCH}" --jq '.[0].number // empty')"
           if [ -n "${pr_number}" ]; then
-            gh pr edit "${pr_number}" --title "${PR_TITLE}" --body-file "${RUNNER_TEMP}/body.md"
+            gh api --method PATCH "repos/${GITHUB_REPOSITORY}/pulls/${pr_number}" \
+              -f title="${PR_TITLE}" \
+              -f body="$(cat "${RUNNER_TEMP}/body.md")" \
+              --silent
             echo "Updated existing PR #${pr_number}."
           else
-            gh pr create \
-              --base main \
-              --head "${REFRESH_BRANCH}" \
-              --title "${PR_TITLE}" \
-              --body-file "${RUNNER_TEMP}/body.md"
+            gh api --method POST "repos/${GITHUB_REPOSITORY}/pulls" \
+              -f title="${PR_TITLE}" \
+              -f head="${REFRESH_BRANCH}" \
+              -f base=main \
+              -f body="$(cat "${RUNNER_TEMP}/body.md")" \
+              --jq '.html_url'
           fi
 
       - name: Send Slack notification on failure