From b45fbbeec17b7bafd87c530ee2c79ca81ad005d3 Mon Sep 17 00:00:00 2001
From: Mario Loriedo <mario.loriedo@gmail.com>
Date: Thu, 4 Jun 2026 12:11:42 +0200
Subject: [PATCH] Set permissions for win installer CI job

Explicitly set `content: read` permissions so that the GITHUB_TOKEN type
have permissions to "Get a release".

Fixes https://github.com/podman-container-tools/podman/issues/28850

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
(cherry picked from commit 9c7ad74edeb7fdb026e3998961454e647136b4f7)
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
---
 .github/workflows/ci.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9f612c59d7..5202844283 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -208,7 +208,8 @@ jobs:
     name: windows installer ${{ matrix.provider }}
     runs-on: windows-2025-vs2026
     timeout-minutes: 20
-    permissions: {}
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix: