From 5819938c93f2eb504b0e7593314d6d1f168c6196 Mon Sep 17 00:00:00 2001 From: Alexander Bayandin Date: Thu, 17 Apr 2025 09:54:23 +0100 Subject: [PATCH] CI(pg-clients): fix workflow permissions (#11623) ## Problem `pg-clients` can't start: ``` The workflow is not valid. .github/workflows/pg-clients.yml (Line: 44, Col: 3): Error calling workflow 'neondatabase/neon/.github/workflows/build-build-tools-image.yml@aa19f10e7e958fbe0e0641f2e8c5952ce3be44b3'. The nested job 'check-image' is requesting 'packages: read', but is only allowed 'packages: none'. .github/workflows/pg-clients.yml (Line: 44, Col: 3): Error calling workflow 'neondatabase/neon/.github/workflows/build-build-tools-image.yml@aa19f10e7e958fbe0e0641f2e8c5952ce3be44b3'. The nested job 'build-image' is requesting 'packages: write', but is only allowed 'packages: none'. ``` ## Summary of changes - Grant required `packages: write` permissions to the workflow --- .github/workflows/pg-clients.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pg-clients.yml b/.github/workflows/pg-clients.yml index cad222f60d..fa4fd73b12 100644 --- a/.github/workflows/pg-clients.yml +++ b/.github/workflows/pg-clients.yml @@ -42,6 +42,8 @@ jobs: github-event-name: ${{ github.event_name }} build-build-tools-image: + permissions: + packages: write needs: [ check-permissions ] uses: ./.github/workflows/build-build-tools-image.yml secrets: inherit