ci: drop unused contents: write override in nix-build

GITHUB_TOKEN no longer pushes anything in this workflow. PR runs are read-only, and main pushes go through the paseo-ai App token. The workflow-level 'contents: read' is sufficient. Addresses #365.
2026-05-12 12:35:05 +07:00
parent ce9474055e
commit e0361ddd22
1 changed files with 0 additions and 2 deletions
@@ -38,8 +38,6 @@ permissions:
 jobs:
  build:
    runs-on: ubuntu-latest
-    permissions:
-      contents: write
    steps:
      - uses: actions/create-github-app-token@v1
        if: github.event_name == 'push' && github.ref == 'refs/heads/main'