Refresh workflow changes in the CI

[mdanish-kh]

Take a look at: https://github.com/coder/coder/actions/runs/8343104510/job/22833326734

Probably requires attention from a maintainer to sync workflow changes
(yes this has been one stubborn / problematic step, but maybe this is the final step in unblocking it 😄 )

[kylecarbs]

@mdanish-kh, do you know what permission is required for GitHub Actions? I'm a bit confused looking at it: https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[mdanish-kh]

@kylecarbs Sorry but I don't have a clue about that bit, or why this error is even popping up in the first place. I assumed it had to do with custom permissions defined in the release CI, since the steps associated with Publish to winget-pkgs shouldn't require any additional permissions.

I'll share a reference workflow file from another repo with the same steps, if that helps:

https://github.com/microsoft/devhome/blob/main/.github/workflows/winget-submission.yml

[mdanish-kh]

Looking at the error though, I'm "guessing" it wants a new token that has the workflow scope permission set? Normally the token needed for wingetcreate (that's the secrets.CDRCI_GITHUB_TOKEN in the release CI yaml) requires the "repo" scope. Maybe, it needs the workflow scope too here? That means you may need to regenerate the token and update the repo secret

[matifali]

@kylecarbs, let's update the token with the workflow permission.
But I am unsure what other permissions should be required.

[mdanish-kh]

I believe this is fixed now 🎉 @matifali Did adding workflow permission do the trick? Feel free to close out this issue now

[matifali]

We deleted and recreated the fork. No permissions were changed.

cc: @deansheather.