Grant packages:write to the build job's auto-token

2026-08-23 11:03:42 +00:00
parent 0dcf5488d2
commit 5f804baea9
1 changed files with 5 additions and 0 deletions
@@ -10,6 +10,11 @@ on:
 jobs:
  build-and-push:
    runs-on: docker
+    # Default auto-token permission on this instance is read-only for packages;
+    # pushing to the container registry needs write explicitly.
+    permissions:
+      contents: read
+      packages: write
    steps:
      - uses: actions/checkout@v4