ci: grant contents:read so checkout works on this private fork

2026-11-04 00:48:40 +00:00 · 2026-08-04 07:11:37 +02:00
parent 2221bf2972
commit 9475ec3a48
9 changed files with 52 additions and 9 deletions
@@ -2,7 +2,11 @@ name: Validate Git LFS

 on: [pull_request, merge_group]

-permissions: {}
+permissions:
+  # Private fork: actions/checkout needs contents:read to clone. Upstream is public,
+  # where an empty token can still read the repo, so an empty permissions block works there and
+  # fails here with `fatal: repository not found`.
+  contents: read

 jobs:
  build: