From ce89d13d56424313bcbe2cb319f8c850346947fb Mon Sep 17 00:00:00 2001 From: monkytheluffy Date: Fri, 16 Oct 2026 23:27:40 +1100 Subject: [PATCH] =?UTF-8?q?ci(binary):=20contents:write=20=E2=80=94=20GITH?= =?UTF-8?q?UB=5FTOKEN=20is=20read-only=20by=20default=20on=20public=20repo?= =?UTF-8?q?s,=20the=20release-asset=20upload=20403s=20without=20it?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Run 38893167900: all three built legs passed every gate (anchor byte-exact, no-compiler e2e, clean-env e2e) and failed identically at upload with 'Resource not accessible by integration' (releases#update-a-release). The build is correct; the token lacked write. --- .github/workflows/binary.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/binary.yml b/.github/workflows/binary.yml index 3bf7464..7fdd823 100644 --- a/.github/workflows/binary.yml +++ b/.github/workflows/binary.yml @@ -32,6 +32,11 @@ on: types: [published] workflow_dispatch: +# The upload step attaches assets to the existing release; public repos +# default GITHUB_TOKEN to read-only, so contents:write is explicit. +permissions: + contents: write + jobs: build: strategy: