Fix CI lint secrets permission error and macOS GHA runner homebrew PA…

…TH bug (#55)

* fix(ci): use GITHUB_TOKEN instead of secret to allow external PR lint

* fix(ci): deal with gha macos homebrew symlink bug

.github/workflows/lint.yml

@@ -14,8 +14,7 @@ jobs:
     - name: Set environment variables
       run: |
         echo "REPORTER=${{ github.event_name == 'pull_request' && 'github-pr-review' || 'github-check' }}" >> $GITHUB_ENV
-        echo "REVIEWDOG_GITHUB_API_TOKEN=${{ secrets.REVIEWDOG_GITHUB_API_TOKEN }}" >> $GITHUB_ENV
-        echo "REVIEWDOG_TOKEN=${{ secrets.REVIEWDOG_TOKEN }}" >> $GITHUB_ENV
+        echo "REVIEWDOG_GITHUB_API_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_ENV
 
     - name: clang-format
       uses: DoozyX/clang-format-lint-action@v0.14
@@ -34,14 +33,14 @@ jobs:
     - name: flake8
       uses: reviewdog/action-flake8@v3
       with:
-        github_token: ${{ secrets.REVIEWDOG_GITHUB_API_TOKEN }}
+        github_token: ${{ secrets.GITHUB_TOKEN }}
         reporter: ${{ env.REPORTER }}
         filter_mode: nofilter
 
     - name: black
       uses: reviewdog/action-black@v3
       with:
-        github_token: ${{ secrets.REVIEWDOG_GITHUB_API_TOKEN }}
+        github_token: ${{ secrets.GITHUB_TOKEN }}
         reporter: ${{ env.REPORTER }}
         filter_mode: nofilter
 

.github/workflows/macos-install.sh

@@ -2,7 +2,12 @@
 
 set -e
 
-brew reinstall cmake
+# See https://github.com/actions/runner-images/issues/9471 for why we have
+# brew unlink and brew link commands here
+brew unlink cmake || true
+brew reinstall cmake || true
+brew link --overwrite cmake
+
 brew install dav1d aom rav1e
 
 if [ "$GHA_PYTHON_VERSION" == "2.7" ]; then