Skip to content

Authorize draft Release asset reads - #61

Merged
Anionix merged 1 commit into
mainfrom
codex/allow-draft-release-read
Jul 14, 2026
Merged

Authorize draft Release asset reads#61
Anionix merged 1 commit into
mainfrom
codex/allow-draft-release-read

Conversation

@Anionix

@Anionix Anionix commented Jul 14, 2026

Copy link
Copy Markdown
Owner

Summary

  • grant contents write only to the manual Linux benchmark job
  • keep repository-wide and pull-request CI permissions read-only
  • allow the same-repository token to read draft Release assets

Evidence

  • Actions runs 29299320000, 29299320945, and 29299321908 reached the numeric draft Release endpoint but received HTTP 403 with contents read
  • repository default remains read

Refs #59

@Anionix
Anionix merged commit c09ac84 into main Jul 14, 2026
1 check passed
@Anionix
Anionix deleted the codex/allow-draft-release-read branch July 14, 2026 01:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant