From b7887efb6963a065f0c5fb73050f38e603c8da52 Mon Sep 17 00:00:00 2001 From: DenizSAHIN570 Date: Mon, 14 Sep 2026 22:39:14 +0300 Subject: [PATCH] release: grant contents:write so Attach to release actually works GITHUB_TOKEN defaults to read-only, so softprops/action-gh-release@v2's Attach to release step fails on every platform with "Resource not accessible by integration". Checked the last several releases on this repo (v0.1.0 through v0.2.1) - every one only has the macOS dmg attached, even though the Linux and Windows builds succeed in the same run. This scopes GITHUB_TOKEN to just what the workflow needs. --- .github/workflows/release.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0e68b64..216482a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,6 +6,15 @@ on: - "v*.*.*" workflow_dispatch: +# Default GITHUB_TOKEN is read-only here, so the "Attach to release" step +# below (softprops/action-gh-release@v2) fails on every platform with +# "Resource not accessible by integration" — every release from v0.1.0 +# through v0.2.1 shipped with only the macOS dmg attached (uploaded locally +# via scripts/publish-dmg.sh) even though this workflow builds Linux + +# Windows bundles too. +permissions: + contents: write + jobs: build: name: Build (${{ matrix.platform }})