From b33327226b12284962ee57555f175b0da05bc67c Mon Sep 17 00:00:00 2001
From: Paul Millar <paul@pinion.desy.de>
Date: Mon, 29 Jun 2026 12:28:12 +0200
Subject: [PATCH] Add explicit permission to in validate-panet job

The `validate-panet` job uses the `EnricoMi/publish-unit-test-result`
action to publish the JUnit output from running LintedData validation of
the OBO-Robot-built output.

Publishing results requires write access to the `checks` resource, which
is currently missing.

This patch adds this authorisation specifically for the `validate-panet`
job.
---
 .github/workflows/build.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b623a40..7ae98bc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -63,6 +63,10 @@ jobs:
     needs: build-panet
     runs-on: ubuntu-latest
     container: dlrdw/linteddata:3.0.0
+    permissions:
+      checks: write
+      contents: read       # Required to checkout code
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4