From e21e802953a2e81cdde9824e6ab0937c5e457ed5 Mon Sep 17 00:00:00 2001 From: Simo Lin Date: Tue, 10 Mar 2026 08:49:27 -0700 Subject: [PATCH] fix(ci): add packages:write permission to engine docker release workflows The engine docker workflows (sglang, vllm, trtllm) failed to push images to GHCR with "installation not allowed to Write organization package" because the GITHUB_TOKEN only had Packages: read. Add permissions block with contents: read and packages: write to all three workflows, matching the nightly-docker.yml pattern. Signed-off-by: Simo Lin --- .github/workflows/release-sglang-docker.yml | 4 ++++ .github/workflows/release-trtllm-docker.yml | 4 ++++ .github/workflows/release-vllm-docker.yml | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/.github/workflows/release-sglang-docker.yml b/.github/workflows/release-sglang-docker.yml index 657b79fd63..7722006692 100644 --- a/.github/workflows/release-sglang-docker.yml +++ b/.github/workflows/release-sglang-docker.yml @@ -50,6 +50,10 @@ on: required: false type: string +permissions: + contents: read + packages: write + jobs: build: uses: ./.github/workflows/_build-engine-image.yml diff --git a/.github/workflows/release-trtllm-docker.yml b/.github/workflows/release-trtllm-docker.yml index 13de92a8b0..a295fe03db 100644 --- a/.github/workflows/release-trtllm-docker.yml +++ b/.github/workflows/release-trtllm-docker.yml @@ -43,6 +43,10 @@ on: required: false type: string +permissions: + contents: read + packages: write + jobs: build: uses: ./.github/workflows/_build-engine-image.yml diff --git a/.github/workflows/release-vllm-docker.yml b/.github/workflows/release-vllm-docker.yml index ebe6c6d3c2..4fc069b4b0 100644 --- a/.github/workflows/release-vllm-docker.yml +++ b/.github/workflows/release-vllm-docker.yml @@ -43,6 +43,10 @@ on: required: false type: string +permissions: + contents: read + packages: write + jobs: build: uses: ./.github/workflows/_build-engine-image.yml