From 00923b2b671099d40b20ff421447e93e74c10a06 Mon Sep 17 00:00:00 2001 From: Tung Bui Date: Sat, 25 Jul 2026 19:38:03 +0700 Subject: [PATCH] fix: grant contents write permission for SBOM release asset upload The Generate SBOM step (anchore/sbom-action) defaults to attaching the SBOM to the tag's GitHub Release when triggered by a tag push, which requires contents: write. With contents: read the API call failed with "Resource not accessible by integration". Claude-Session: https://claude.ai/code/session_01KwmxctVC43yU6xEr1cEdMu --- .github/workflows/deploy-docker-image-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy-docker-image-release.yml b/.github/workflows/deploy-docker-image-release.yml index 728c052..3ebcbb1 100644 --- a/.github/workflows/deploy-docker-image-release.yml +++ b/.github/workflows/deploy-docker-image-release.yml @@ -6,7 +6,7 @@ on: - 'v*' permissions: - contents: read + contents: write security-events: write jobs: