JakeBreath ed6178d12e Make Actions token permissions explicit ...

The automatic job token creates the desktop release, so the CD desktop job
asks for contents: write; the images job keeps contents: read and asks for
packages: write so the job token can stand in for the scoped registry PAT.
CI stays read-only. The registry token itself remains a write:package-only
PAT (verified login + pull).

2026-09-22 23:30:37 -05:00

..

workflows

Make Actions token permissions explicit

2026-09-22 23:30:37 -05:00