1 changed files with 1 additions and 0 deletions
@@ -71,6 +71,7 @@ jobs:
    permissions:
      contents: read
      pull-requests: read
+      secrets: read   # SOP_TIER_CHECK_TOKEN env var substitution — Gitea 1.22.6 requires explicit grant
    steps:
      - name: Check out base branch (for the script)
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2