Fix pkgcheck false “no CI checks” failure by restoring workflow metadata read access

[Copilot]

The pkgcheck Actions job failed with Package has no continuous integration checks. despite existing CI workflows. The failure was caused by the workflow token permissions being too restrictive for pkgcheck’s GitHub workflow/run introspection.

• Root cause

  • pkgcheck inspects GitHub Actions workflow metadata to verify CI presence/status.
  • The pkgcheck workflow only granted issues: write, which blocked required read access to Actions metadata.

• Change made

  • Updated .github/workflows/pkgcheck.yaml job permissions to include read access needed for CI discovery while preserving issue-comment behavior:
    • actions: read
    • contents: read
    • issues: write

• Resulting behavior

  • pkgcheck can now read workflow/run metadata and correctly detect existing CI checks instead of reporting a false negative.

permissions:
  actions: read
  contents: read
  issues: write