Update check_cla.yml

.github/workflows/check_cla.yml

@@ -51,6 +51,7 @@ jobs:
     name: Check External Contributions
     runs-on: ubuntu-latest
     needs: check-membership
+    permissions: write-all
     if: ${{ needs.check-membership.outputs.is_member != 'true' && needs.check-membership.result == 'success' }}
     steps:
       - name: Checkout
@@ -78,22 +79,30 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v3
+
+      - name: Comment on PR
+        uses: actions/github-script@v6
         with:
-          ref: ${{ github.event.pull_request.head.ref }}
-          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: '👋 Thanks for reporting!'
+            })
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Close Pull Request
         id: close_pr
         if: ${{ steps.accepts_external_contrib.outputs.accepts_contrib != 'true' }}
         run: |
           message="This repository does not accept external contributions yet.
-
           We are therefore closing this Pull Request, thank you for your understanding.
-
           — The DFINITY Foundation"
-          gh pr close ${{ github.event.number }} --comment "$message"
+          gh pr close ${{ github.event.number }}
         env:
-          GH_TOKEN: ${{ github.token }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Add Label
         uses: actions-ecosystem/action-add-labels@v1