From 4ca5157508670bf7cdcdc1240cb09bfd86cd30e1 Mon Sep 17 00:00:00 2001
From: GCHQ Developer 85297 <95289555+C85297@users.noreply.github.com>
Date: Fri, 6 Feb 2026 11:34:50 +0000
Subject: [PATCH] Fix release workflow permissions (#2181)

---
 .github/workflows/master.yml   | 7 ++++---
 .github/workflows/releases.yml | 4 +++-
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 74710dff..13d280f6 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -1,18 +1,19 @@
 name: "Master Build, Test & Deploy"
 
-permissions:
-  contents: read
-
 on:
   workflow_dispatch:
   push:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   main:
     permissions:
       contents: write
+      pages: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index b40af876..9e0f41e5 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -7,7 +7,6 @@ on:
       - "v*"
 
 permissions:
-  id-token: write
   contents: read
 
 env:
@@ -18,6 +17,9 @@ env:
 
 jobs:
   main:
+    permissions:
+      id-token: write
+      packages: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6