From 3d924df326f51eae3e4dac959d8da49305a77311 Mon Sep 17 00:00:00 2001
From: Chris Gianelloni <wolf31o2@blinklabs.io>
Date: Sat, 29 Mar 2025 11:13:18 -0400
Subject: [PATCH] ci(publish): explicit workflow permissions

Signed-off-by: Chris Gianelloni <wolf31o2@blinklabs.io>
---
 .github/workflows/publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0be0174..2bd64e6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -288,6 +288,8 @@ jobs:
 
   github-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     needs: [multi-arch-manifest]
     steps:
       - run: "echo \"RELEASE_TAG=${GITHUB_REF#refs/tags/}\" >> $GITHUB_ENV"