Fix CI - grant workflows permission for internal sync push (#11010)

2026-06-29 16:30:01 +03:00
parent 257a11d498
commit a5ed41fa0f
1 changed files with 4 additions and 1 deletions
@@ -28,8 +28,11 @@ jobs:
          private-key: ${{ secrets.SYNC_INTERNAL_PK }}
          repositories: social-app-internal
          # Scope the token down from the app's full installation permissions;
-          # pushing is the only thing this token is used for
+          # pushing is the only thing this token is used for. The workflows
+          # permission is required because the sync includes files under
+          # .github/workflows/, which GitHub refuses to push without it.
          permission-contents: write
+          permission-workflows: write
      - name: Push to internal repo
        env:
          TOKEN: ${{ steps.app-token.outputs.token }}