From 5f804baea94c7d5e10925342da1438054950f44c Mon Sep 17 00:00:00 2001
From: William Turner <w_turner@orange.fr>
Date: Sun, 23 Aug 2026 11:03:42 +0000
Subject: [PATCH] Grant packages:write to the build job's auto-token

---
 .gitea/workflows/build.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 0e085b3..60c9311 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -10,6 +10,11 @@ on:
 jobs:
   build-and-push:
     runs-on: docker
+    # Default auto-token permission on this instance is read-only for packages;
+    # pushing to the container registry needs write explicitly.
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v4