From 60cabacd46d9fbf459e4c8f3e8b4e12503b491a8 Mon Sep 17 00:00:00 2001
From: Linnea Gräf <nea@nea.moe>
Date: Sat, 6 Sep 2025 21:09:50 +0200
Subject: ci: set content permissions on release upload

---
 .github/workflows/build.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5989a02..0cd0b64 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -72,6 +72,8 @@ jobs:
         name: Prepare a release
         runs-on: ubuntu-22.04
         needs: build
+        permissions:
+            contents: write
         if: ${{ 'push' == github.event_name && startsWith(github.ref, 'refs/tags/') }}
         steps:
             -   uses: actions/checkout@v4
@@ -92,4 +94,4 @@ jobs:
                 env:
                     GH_TOKEN: ${{ github.token }}
                 run: |
-                    gh release create -t "Firmament ${GITHUB_REF#refs/tags/}" "${GITHUB_REF#refs/tags/}" -F "changelog.md" "*.jar"
+                    gh release create --draft -t "Firmament ${GITHUB_REF#refs/tags/}" "${GITHUB_REF#refs/tags/}" -F "changelog.md" "*.jar"
-- 
cgit