From ef0127077a842f47f497a896d1734ca94628997a Mon Sep 17 00:00:00 2001
From: ifsantana <flaubert165@gmail.com>
Date: Fri, 14 Aug 2026 13:29:38 -0300
Subject: [PATCH] fix: grant actions:read to sign-artifacts so the release CI
 gate can query workflow runs

The 'Require green CI on the tagged commit' step calls gh run list against
the Actions API, but the job's permissions block only granted contents:read,
so the default GITHUB_TOKEN got a 403 on GET /actions/workflows and the
v0.1.0 release run failed before building anything.
---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4e1299b..05dc5cb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,6 +11,7 @@ jobs:
     timeout-minutes: 30
     permissions:
       contents: read
+      actions: read
 
     steps:
       - name: Checkout