From 1e5b075f4886c01273dedf224b8e4e3abb2c9529 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A9mi=20Verschelde?= <rverschelde@gmail.com>
Date: Sun, 16 Mar 2025 09:22:55 +0100
Subject: [PATCH] CI: Set explicit write permission for cache cleanup token

---
 .github/workflows/cache_cleanup.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/cache_cleanup.yml b/.github/workflows/cache_cleanup.yml
index 94188b379cc..9d2859a75fc 100644
--- a/.github/workflows/cache_cleanup.yml
+++ b/.github/workflows/cache_cleanup.yml
@@ -1,4 +1,4 @@
-# https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/caching-dependencies-to-speed-up-workflows#force-deleting-cache-entries
+# https://github.com/actions/cache/blob/main/tips-and-workarounds.md#force-deletion-of-caches-overriding-default-cache-eviction-policy
 name: 🧹 Cache Cleanup
 on:
   pull_request:
@@ -9,6 +9,10 @@ jobs:
   cleanup:
     name: Cleanup PR caches
     runs-on: ubuntu-latest
+    permissions:
+      # `actions:write` permission is required to delete caches
+      actions: write
+      contents: read
     steps:
       - name: Cleanup
         env: