Use personal access token for GitHub rebase command (#2471)

* Use personal access token for GitHub rebase command

* Set persist credentials to false when checking out during rebase action

* Allow rebasing only for members of Simple org

* Update CHANGELOG

.github/workflows/ci_check_pr_comment.yml

@@ -32,15 +32,17 @@ jobs:
   rebase_pr:
     runs-on: [ ubuntu-latest ]
     # This job only runs for pull request comments and when the comment starts with `/rebase`
-    if: contains(github.event.comment.html_url, '/pull/') && startsWith(github.event.comment.body, '/rebase')
+    if: contains(github.event.comment.html_url, '/pull/') && startsWith(github.event.comment.body, '/rebase') && github.event.comment.author_association == 'MEMBER'
     steps:
       - uses: actions/checkout@v2
         with:
+          token: ${{ secrets.GITHUB_ACCESS_TOKEN  }}
+          persist-credentials: false
           fetch-depth: 0
       - name: Rebase
         uses: cirrus-actions/rebase@1.4
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_ACCESS_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_ACCESS_TOKEN  }}
 
   qa_purge_env:
     runs-on: [ ubuntu-latest ]

CHANGELOG.md

@@ -8,6 +8,7 @@
 - Add option to manually trigger GH Actions
 - Migrate `SetupActivity` to the new navigation framework
 - Show link id sheet after patient summary profile is loaded and link id is present
+- Use personal access token for rebase action
 - [In Progress: 20 Jan 2021] Material Theme-ing Migration
 - [In Progress: 08 Feb 2021] Migrate app to use ViewBinding