chore: explicitly pass GITHUB_TOKEN to checkout and document repository-level write permissions

2026-09-04 22:35:15 +02:00
parent 08be5fe521
commit 39ac4100e3
2 changed files with 6 additions and 0 deletions
@@ -22,6 +22,7 @@ jobs:
    - name: Checkout PR Branch
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1   # v7.0.1
      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
        ref: ${{ github.head_ref }}
        fetch-depth: 0

@@ -33,3 +33,8 @@ The Gitea workflow does the following:
 2.  Sets up Node.js and pnpm.
 3.  Installs the dependencies using `pnpm install`.
 4.  Runs the tests using `pnpm test`.
+
+### Automated Recompilation & Permissions
+
+*   The automated recompilation workflow (`.gitea/workflows/recompile-dist.yaml`) recompiles `dist/index.js` on Renovate PRs and requires `contents: write` permissions to push back to the branch.
+*   Ensure that the Gitea repository workflow settings have write permissions enabled (**Settings** ➔ **Actions** ➔ **General** ➔ **Workflow permissions** ➔ **Read and write permissions**).