set contents: write to allow release creation (#21968)

pantsbuild · Feb 18, 2025 · a6baddc · a6baddc
1 parent c31622c
commit a6baddc
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 9 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -17,7 +17,7 @@ jobs:
     - release_info
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - self-hosted
@@ -131,7 +131,7 @@ jobs:
     - release_info
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - ubuntu-22.04
@@ -256,7 +256,7 @@ jobs:
     - release_info
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - macos-13
@@ -386,7 +386,7 @@ jobs:
     - release_info
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - macos-14

diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -338,7 +338,7 @@ jobs:
     - classify_changes
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - self-hosted
@@ -412,7 +412,7 @@ jobs:
     - classify_changes
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - ubuntu-22.04
@@ -484,7 +484,7 @@ jobs:
     - classify_changes
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - macos-13
@@ -574,7 +574,7 @@ jobs:
     - classify_changes
     permissions:
       attestations: write
-      contents: read
+      contents: write
       id-token: write
     runs-on:
     - macos-14

diff --git a/src/python/pants_release/generate_github_workflows.py b/src/python/pants_release/generate_github_workflows.py
@@ -883,7 +883,7 @@ def build_wheels_job(
             "runs-on": helper.runs_on(),
             "permissions": {
                 "id-token": "write",
-                "contents": "read",
+                "contents": "write",
                 "attestations": "write",
             },
             **({"container": container} if container else {}),