mirror of
https://github.com/fmtlib/fmt.git
synced 2026-08-03 20:14:20 +02:00
Victor Zverovich
87bb05d3b2
The provenance job called the SLSA generator with contents: read, but the generator's upload-assets job declares contents: write. A reusable workflow's job permissions may not exceed the caller's, so GitHub failed the run at startup. Grant contents: write; the upload-assets job is still skipped at runtime since upload-assets is false.