From b22437f2f980b028d7f3103ea2ae4b5f9908d50d Mon Sep 17 00:00:00 2001 From: Samuel K Date: Mon, 18 May 2026 14:31:23 -0500 Subject: [PATCH] fix(ci): explicitly request contents:write permission for app token Add permission-contents:write to the create-github-app-token step to ensure the generated token explicitly includes write access to contents (including releases). The installation already has contents:write, but explicitly scoping the token may resolve the 403 on release creation. --- .github/workflows/promote-release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/promote-release.yml b/.github/workflows/promote-release.yml index ae1c59e83..4dff4d04a 100644 --- a/.github/workflows/promote-release.yml +++ b/.github/workflows/promote-release.yml @@ -22,6 +22,7 @@ jobs: with: app-id: ${{ secrets.DEVSY_GITHUB_APP_ID }} private-key: ${{ secrets.DEVSY_GITHUB_APP_PRIVATE_KEY }} + permission-contents: write - uses: actions/checkout@v6 with: