From c19f6a5e89a02bbc09ba5f01d8476653e45d397b Mon Sep 17 00:00:00 2001
From: Aaron Steinfeld <aaron@traceable.ai>
Date: Sun, 29 Jun 2025 08:14:07 -0400
Subject: [PATCH] ci: fix token permissions

---
 .github/workflows/publish.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8df78ac7..51048671 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -5,6 +5,11 @@ on:
       - main
 jobs:
   publish:
+    permissions:
+      contents: 'write'
+      id-token: 'write'
+      issues: 'write'
+      pull-requests: 'write'
     runs-on: ubuntu-24.04
     steps:
       - name: Check out code