From d272394dc80cd0a78e42f1f78f11372587bcb7d2 Mon Sep 17 00:00:00 2001
From: Charles Lowell <cowboyd@frontside.com>
Date: Tue, 10 Nov 2026 21:14:30 -0600
Subject: [PATCH] Fix publish workflow permissions

---
 .github/workflows/publish.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1807455..c9214e9 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,6 +8,10 @@ on:
 
 jobs:
   publish:
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
     if: github.repository_owner == 'bombshell-dev'
     uses: bombshell-dev/automation/.github/workflows/publish.yml@main
     secrets: inherit