Skip to content

ci: backport job token permissions to v1.11 - #4825

Open
KaloyanTanev wants to merge 1 commit into
main-v1.11from
kalo/v1.11-workflow-permissions
Open

KaloyanTanev wants to merge 1 commit into
main-v1.11from
kalo/v1.11-workflow-permissions

Conversation

@KaloyanTanev

Copy link
Copy Markdown
Collaborator

Backports #4803 to the v1.11 release branch. Without the packages: write permission the Docker build job fails to push to GHCR with 403 Forbidden, which broke the v1.11.4-rc1 image build.

category: fixbuild
ticket: none

These jobs rely on the org default GITHUB_TOKEN (read+write). Declaring what they need lets the org default become read-only.

Refs ObolNetwork/obol-infrastructure#3294

(cherry picked from commit 4e4d996)
@KaloyanTanev KaloyanTanev self-assigned this Nov 6, 2026
@sonarqubecloud

sonarqubecloud Bot commented Nov 6, 2026

Copy link
Copy Markdown

@KaloyanTanev
KaloyanTanev enabled auto-merge (squash) November 6, 2026 12:12
@codecov

codecov Bot commented Nov 6, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.86%. Comparing base (4e9ab50) to head (1a9fcb7).

Additional details and impacted files
@@              Coverage Diff               @@
##           main-v1.11    #4825      +/-   ##
==============================================
- Coverage       65.89%   65.86%   -0.03%     
==============================================
  Files             248      248              
  Lines           30396    30396              
==============================================
- Hits            20028    20019       -9     
- Misses          10367    10376       +9     
  Partials            1        1              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants