fix(release): contents:write for SBOM asset upload

The sbom job's `permissions: packages: read` replaces the default token
set, so `gh release upload` got 403 Resource not accessible. Grant
contents:write alongside packages:read.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
Tomas DvorakandDevin committed 2026-09-28 16:41:17 +02:00
1 parent 49ca9067a9
commit 9ab9b550d1
1 file changed
+2
+2
View File
@@ -327,6 +327,8 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
packages: read packages: read
# contents: write — the job uploads SBOM assets onto the release.
contents: write
env: env:
VERSION: ${{ needs.verify.outputs.version }} VERSION: ${{ needs.verify.outputs.version }}
steps: steps: