fix: add contents:write permission and GHCR_TOKEN for create-release job

This commit is contained in:
LukeGus
2026-06-21 16:07:40 -05:00
parent d1a8dcf3c6
commit 0354401640
+4 -2
View File
@@ -293,6 +293,8 @@ jobs:
needs: [prep, merge-to-main, docker] needs: [prep, merge-to-main, docker]
if: ${{ inputs.mode != 'Dry run' }} if: ${{ inputs.mode != 'Dry run' }}
runs-on: blacksmith-2vcpu-ubuntu-2404 runs-on: blacksmith-2vcpu-ubuntu-2404
permissions:
contents: write
steps: steps:
- name: Checkout main - name: Checkout main
uses: actions/checkout@v6 uses: actions/checkout@v6
@@ -308,7 +310,7 @@ jobs:
- name: Clear existing release artifacts (overwrite mode) - name: Clear existing release artifacts (overwrite mode)
if: ${{ inputs.mode == 'Overwrite release' }} if: ${{ inputs.mode == 'Overwrite release' }}
env: env:
GH_TOKEN: ${{ github.token }} GH_TOKEN: ${{ secrets.GHCR_TOKEN }}
run: | run: |
TAG="${{ needs.prep.outputs.release_tag }}" TAG="${{ needs.prep.outputs.release_tag }}"
if ! gh release view "$TAG" --repo ${{ github.repository }} >/dev/null 2>&1; then if ! gh release view "$TAG" --repo ${{ github.repository }} >/dev/null 2>&1; then
@@ -331,7 +333,7 @@ jobs:
- name: Create or update GitHub release - name: Create or update GitHub release
if: ${{ inputs.mode != 'Overwrite release' }} if: ${{ inputs.mode != 'Overwrite release' }}
env: env:
GH_TOKEN: ${{ github.token }} GH_TOKEN: ${{ secrets.GHCR_TOKEN }}
run: | run: |
TAG="${{ needs.prep.outputs.release_tag }}" TAG="${{ needs.prep.outputs.release_tag }}"
TITLE="release-${{ needs.prep.outputs.version }}" TITLE="release-${{ needs.prep.outputs.version }}"