ci: request packages:write — repo's default Actions token is read-only
Publish Maven packages / publish (push) Failing after 26s
Publish Maven packages / publish (push) Failing after 26s
Deploy failed with 401 Unauthorized: this repo's default Actions token permission mode is Restricted (read-only on packages, not Permissive), so the auto-provided GITEA_TOKEN couldn't push to the Maven registry without explicitly requesting write access. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Sonnet 5
parent
4710cf8633
commit
9d19de50cb
@@ -17,6 +17,11 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
publish:
|
publish:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
# Deploy got a 401 without this: this repo's default Actions token permission mode is
|
||||||
|
# Restricted (read-only on packages), not Permissive — see
|
||||||
|
# https://docs.gitea.com/usage/actions/token-permissions.
|
||||||
|
permissions:
|
||||||
|
packages: write
|
||||||
# No actions/checkout here on purpose: it's a Node-based action, and this container
|
# No actions/checkout here on purpose: it's a Node-based action, and this container
|
||||||
# (chosen for its preinstalled mvn/JDK 21) has no Node — checkout would fail with
|
# (chosen for its preinstalled mvn/JDK 21) has no Node — checkout would fail with
|
||||||
# "node: executable file not found". A plain git clone needs neither.
|
# "node: executable file not found". A plain git clone needs neither.
|
||||||
|
|||||||
Reference in New Issue
Block a user