fix

Author: ronaldtse

.github/workflows/gem-build.yml

@@ -16,6 +16,10 @@ on:
         type: string
         default: '["x64-mingw32", "x64-mingw-ucrt", "x86_64-darwin", "arm64-darwin", "x86_64-linux", "x86_64-linux-gnu", "x86_64-linux-musl", "aarch64-linux", "aarch64-linux-gnu", "aarch64-linux-musl", "any"]'
 
+permissions:
+  contents: read
+  packages: write
+
 env:
   BUNDLER_VER: latest
 
@@ -94,7 +98,7 @@ jobs:
       - uses: actions/upload-artifact@v6
         if: failure()
         with:
-          name: build-logs-${{ matrix.platform }}
+          name: build-logs-${{ github.run_number }}-${{ matrix.platform }}
           path: tmp/*/ports/*/*/*.log
 
       - if: matrix.platform != 'any' && !startsWith(matrix.platform, 'aarch64-')
@@ -110,11 +114,11 @@ jobs:
 
       - uses: actions/upload-artifact@v6
         with:
-          name: ${{ matrix.platform }}-pkg
+          name: ${{ github.run_number }}-${{ matrix.platform }}-pkg
           path: pkg/*.gem
 
       - if: matrix.platform != 'any'
         uses: actions/upload-artifact@v6
         with:
-          name: lib-${{ matrix.platform }}
+          name: lib-${{ github.run_number }}-${{ matrix.platform }}
           path: lib/ffi-libarchive-binary/libarchive.*

.github/workflows/metanorma.yml

@@ -11,6 +11,9 @@ concurrency:
   group: '${{ github.workflow }}-${{ github.job }}-${{ github.head_ref || github.ref_name }}'
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 env:
   BUNDLER_VER: latest
 
@@ -39,7 +42,7 @@ jobs:
       - uses: actions/download-artifact@v7
         with:
           path: pkg
-          pattern: '*-pkg'
+          pattern: '${{ github.run_number }}-*-pkg'
           merge-multiple: true
 
       - name: Setup ffi-libarchive-binary

.github/workflows/release.yml

@@ -5,6 +5,11 @@ on:
     tags: [ 'v*' ]
   workflow_dispatch:
 
+permissions:
+  contents: write
+  packages: write
+
+
 env:
   BUNDLER_VER: latest
 
@@ -23,7 +28,7 @@ jobs:
       - uses: actions/download-artifact@v7
         with:
           path: pkg
-          pattern: '*-pkg'
+          pattern: '${{ github.run_number }}-*-pkg'
           merge-multiple: true
 
       - name: Publish to rubygems.org

.github/workflows/test.yml

@@ -13,6 +13,10 @@ concurrency:
 env:
   BUNDLER_VER: latest
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build:
     name: Build gems
@@ -79,7 +83,7 @@ jobs:
 
       - uses: actions/download-artifact@v7
         with:
-          name: lib-${{ matrix.platform }}
+          name: lib-${{ github.run_number }}-${{ matrix.platform }}
           path: lib/ffi-libarchive-binary
 
       - run: bundle exec rspec