From 65958a09cbbfb53ab62ece33a45177c7da9c6341 Mon Sep 17 00:00:00 2001
From: Ian Wagner <ian.wagner@stadiamaps.com>
Date: Wed, 21 Aug 2024 16:49:24 +0900
Subject: [PATCH] I guess we still need GitHub package access for now ;)

---
 .github/workflows/gradle-publish.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gradle-publish.yml b/.github/workflows/gradle-publish.yml
index 07efa55d..3a0941c4 100644
--- a/.github/workflows/gradle-publish.yml
+++ b/.github/workflows/gradle-publish.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: macos-13
     permissions:
       contents: read
-      packages: write
+      packages: read
 
     steps:
     - name: Check out repo
@@ -45,3 +45,6 @@ jobs:
         ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_TOKEN }}
         ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.MAVEN_GPG_SECRET_KEY }}
         ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
+        # TODO: Remove these once Rallista's compose wrapper moves to Maven Central
+        GITHUB_ACTOR: ${{ github.actor }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}