clean up github tokens (#12126)

Co-authored-by: sglang-bot <sglangbot@gmail.com>

.github/workflows/bot-bump-kernel-version.yml

@@ -45,6 +45,6 @@ jobs:
 
       - name: Commit and create PR
         env:
-          GH_TOKEN: ${{ secrets.GH_PAT_FOR_TAGGING }}
+          GH_TOKEN: ${{ secrets.GH_PAT_FOR_PULL_REQUEST }}
         run: |
           bash scripts/release/commit_and_pr.sh "sgl-kernel" "${{ github.event.inputs.new_version }}" "$BRANCH_NAME"

.github/workflows/bot-bump-sglang-version.yml

@@ -45,6 +45,6 @@ jobs:
 
       - name: Commit and create PR
         env:
-          GH_TOKEN: ${{ secrets.GH_PAT_FOR_TAGGING }}
+          GH_TOKEN: ${{ secrets.GH_PAT_FOR_PULL_REQUEST }}
         run: |
           bash scripts/release/commit_and_pr.sh "SGLang" "${{ github.event.inputs.new_version }}" "$BRANCH_NAME"

.github/workflows/ci-monitor.yml

@@ -3,7 +3,6 @@ name: CI Monitor
 on:
   schedule:
     - cron: '0 */12 * * *'  # Every 12 hours for main analysis
-    - cron: '0 6 * * *'     # Daily at 6:00 AM UTC for balance analysis
   workflow_dispatch:
     inputs:
       limit:
@@ -40,7 +39,7 @@ jobs:
 
       - name: Run CI Analysis
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }}
+          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }}
           PYTHONUNBUFFERED: 1
           PYTHONIOENCODING: utf-8
         run: |
@@ -49,7 +48,7 @@ jobs:
 
       - name: Run Performance Analysis
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }}
+          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }}
           PYTHONUNBUFFERED: 1
           PYTHONIOENCODING: utf-8
         run: |

.github/workflows/label-pr.yml

@@ -26,7 +26,7 @@ jobs:
         if: steps.checkAccess.outputs.require-result == 'true'
         uses: actions/github-script@v7
         with:
-          github-token: ${{ secrets.GH_PAT_FOR_TAGGING }}
+          github-token: ${{ secrets.GH_PAT_FOR_PULL_REQUEST }}
           script: |
             github.rest.issues.addLabels({
               owner: context.repo.owner,

.github/workflows/nightly-test.yml

@@ -54,7 +54,7 @@ jobs:
 
       - name: Publish traces to storage repo
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }}
+          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }}
           GITHUB_RUN_ID: ${{ github.run_id }}
           GITHUB_RUN_NUMBER: ${{ github.run_number }}
         run: |
@@ -99,7 +99,7 @@ jobs:
 
       - name: Publish traces to storage repo
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI }}
+          GITHUB_TOKEN: ${{ secrets.GH_PAT_FOR_NIGHTLY_CI_DATA }}
           GITHUB_RUN_ID: ${{ github.run_id }}
           GITHUB_RUN_NUMBER: ${{ github.run_number }}
         run: |

.github/workflows/pr-test.yml

@@ -159,7 +159,6 @@ jobs:
     if: needs.check-changes.outputs.sgl_kernel == 'true'
     runs-on: 1-gpu-runner
     env:
-      HF_TOKEN: ${{ secrets.HF_TOKEN }}
       CI: true
     steps:
       - uses: actions/checkout@v4

.github/workflows/release-fake-tag.yml

@@ -18,6 +18,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Get version
         id: get_version
@@ -26,10 +28,8 @@ jobs:
           echo "TAG=v$version" >> $GITHUB_OUTPUT
 
       - name: Create and push fake tag
-        env:
-          GITHUB_TOKEN: ${{ secrets.REPO_TOKEN }}
         run: |
-          git config user.name zhyncs
-          git config user.email me@zhyncs.com
+          git config user.name "sglang-bot"
+          git config user.email "sglang-bot@users.noreply.github.com"
           git checkout -b ${{ steps.get_version.outputs.TAG }}
           git push --set-upstream origin ${{ steps.get_version.outputs.TAG }}