docs: correct release token scopes
All checks were successful
labels / labels (pull_request) Successful in 12s
ci / test (pull_request) Successful in 17s

This commit is contained in:
codex-bot-andresmgsl 2026-09-02 22:54:28 +00:00
parent 088e7e2d66
commit 0edba09a8a
2 changed files with 6 additions and 3 deletions

View file

@ -5,9 +5,11 @@
# Requirements: # Requirements:
# - A Forgejo Actions runner on the instance. Adjust `runs-on` to a label # - A Forgejo Actions runner on the instance. Adjust `runs-on` to a label
# your runner actually advertises (common: docker, ubuntu-latest). # your runner actually advertises (common: docker, ubuntu-latest).
# - A repository/org secret RELEASE_TOKEN: a token with package:write and # - A repository/org secret RELEASE_TOKEN: a token with read:user,
# repository:write scopes for an account allowed to publish packages # write:package and write:repository scopes for an account allowed to
# under the heavy-duty org. # publish packages under the heavy-duty org. read:user is required because
# publish-release.sh runs `stoke auth login`, which validates the token
# against /user.
name: release name: release
on: on:

1
changelog.d/60.md Normal file
View file

@ -0,0 +1 @@
- Correct the release workflow's documented token scopes to include the identity check required before publishing. (#60).