Skip to content

Fix atomic Linux release permissions - #73

Merged
nkavian merged 1 commit into
mainfrom
fix/native-release-linux-permissions
Aug 2, 2026
Merged

Fix atomic Linux release permissions#73
nkavian merged 1 commit into
mainfrom
fix/native-release-linux-permissions

Conversation

@nkavian

@nkavian nkavian commented Aug 2, 2026

Copy link
Copy Markdown
Contributor

Summary

  • pass attestation and OpenID Connect permissions from the atomic workflow to the reusable Linux release workflow
  • retain read-only contents access for Linux staging

GitHub rejects reusable workflows at startup when a called workflow attempts to elevate its caller token permissions. The initial v0.10.2 atomic run failed before any jobs or release mutation.

Verification

  • pnpm exec prettier --check .github/workflows/native-release.yml
  • pnpm typecheck
  • pnpm lint
  • pnpm test
  • pnpm typedoc

No GitHub Release was created by the failed run.

@codecov

codecov Bot commented Aug 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@nkavian
nkavian merged commit e60bd99 into main Aug 2, 2026
2 checks passed
@nkavian
nkavian deleted the fix/native-release-linux-permissions branch August 2, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant