Update Github action

Author: VaniHaripriya

.github/workflows/ci-checks.yml

@@ -11,35 +11,37 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 
-permissions:
-  checks: read  
-  pull-requests: write
-
 jobs:
   reset_ci_passed_label:
     if: github.event_name == 'pull_request' && (github.event.action == 'synchronize' || github.event.action == 'reopened')
     runs-on: ubuntu-latest
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}   
+    permissions:
+      checks: read  
+      pull-requests: write 
     steps:
       - name: Reset ci-passed label status on PR Syncronization
         run: |
           echo "Resetting 'ci-passed' label as new changes have been pushed."
           gh pr edit ${{ github.event.pull_request.number }} --remove-label "ci-passed" --repo $GITHUB_REPOSITORY || echo "Label not present"
-        
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   check_ci_status:
     runs-on: ubuntu-latest
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}     
+    permissions:
+      checks: read  
+      pull-requests: write        
     steps:      
       - name: Check if all CI checks passed
         uses: wechuli/allcheckspassed@0b68b3b7d92e595bcbdea0c860d05605720cf479
-        with:  
-          GITHUB_TOKEN: ${{ env.GITHUB_TOKEN }}                       
+        with:                                 
           delay: '5'
           retries: '7'
-          polling_interval: '5'                  
+          polling_interval: '5'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}               
       - name: Add 'ci-passed' label
         if: success()
         run: |
-          gh pr edit ${{ github.event.pull_request.number }} --add-label "ci-passed" --repo $GITHUB_REPOSITORY
+          gh pr edit ${{ github.event.pull_request.number }} --add-label "ci-passed" --repo $GITHUB_REPOSITORY
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}