Tomas DvorakandDevin 9ab9b550d1 fix(release): contents:write for SBOM asset upload ...

The sbom job's `permissions: packages: read` replaces the default token
set, so `gh release upload` got 403 Resource not accessible. Grant
contents:write alongside packages:read.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-09-28 16:41:17 +02:00

..

ci.yml

ci: run Trivy via container image, not the action

2026-09-21 13:35:25 +02:00

release.yml

fix(release): contents:write for SBOM asset upload

2026-09-28 16:41:17 +02:00