From fce9bfc3c7dda83dbb3fcb03eb9222338ce6771c Mon Sep 17 00:00:00 2001
From: Xuanwo <github@xuanwo.io>
Date: Mon, 10 Aug 2026 18:00:09 +0800
Subject: [PATCH] fix(ci): allow recovery artifact downloads

---
 .github/workflows/pypi-publish.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml
index 8301fbb38..67fd27a55 100644
--- a/.github/workflows/pypi-publish.yml
+++ b/.github/workflows/pypi-publish.yml
@@ -243,6 +243,7 @@ jobs:
     needs: [recover-windows]
     runs-on: ubuntu-latest
     permissions:
+      actions: read
       id-token: write
       contents: read
     steps: