From 9dad4d5496456bb3cce864dd3dee149fb182fee1 Mon Sep 17 00:00:00 2001 From: Martijn Govers Date: Thu, 23 Jul 2026 14:53:01 +0200 Subject: [PATCH 1/3] use restricted app token Signed-off-by: Martijn Govers --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e853271..4f6930d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -35,6 +35,7 @@ jobs: with: client-id: ${{ secrets.RELEASE_BOT_APP_ID }} private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }} + repositories: ${{ github.repository }} - name: Create release uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1 From 91bdd6c8a9a5be52975628119bb88ed521e4883d Mon Sep 17 00:00:00 2001 From: Martijn Govers Date: Thu, 23 Jul 2026 16:55:31 +0200 Subject: [PATCH 2/3] restrict permissions Signed-off-by: Martijn Govers --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4f6930d..956d229 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,6 +36,7 @@ jobs: client-id: ${{ secrets.RELEASE_BOT_APP_ID }} private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }} repositories: ${{ github.repository }} + permissions-contents: write - name: Create release uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1 From c5977bd5a6ac1eba839c19e5c3435ec8359e61e6 Mon Sep 17 00:00:00 2001 From: Martijn Govers Date: Fri, 24 Jul 2026 11:11:23 +0200 Subject: [PATCH 3/3] Apply suggestion from @mgovers Signed-off-by: Martijn Govers Signed-off-by: Martijn Govers --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 956d229..6156ada 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,7 +36,7 @@ jobs: client-id: ${{ secrets.RELEASE_BOT_APP_ID }} private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }} repositories: ${{ github.repository }} - permissions-contents: write + permission-contents: write - name: Create release uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1