Files
bsky-social-app/.github
Eric Bailey 1cd620cc40 Grant contents: write to the android nightly caller job
GitHub statically validates the reusable-workflow permission ceiling, so
calling build-submit-android.yml fails validation because its attachToRelease
job requests contents: write while the nightly caller only granted read. That
job is skipped for nightly builds (it needs a production tag), but the check
runs at parse time regardless. Scope the write permission to the android
caller job so the rest of the workflow stays read-only.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-17 17:59:34 -05:00
..