From e01c7403028b22a0d9f93edc97cb5823d703f5e8 Mon Sep 17 00:00:00 2001
From: Michael Johnson <buhnux@gmail.com>
Date: Sun, 8 Nov 2026 05:54:37 -0500
Subject: [PATCH] fix(init): grant workflow permissions in the generated caller

---
 dbuild/templates/github-workflow.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/dbuild/templates/github-workflow.yaml b/dbuild/templates/github-workflow.yaml
index 6c657fb..9807f5c 100644
--- a/dbuild/templates/github-workflow.yaml
+++ b/dbuild/templates/github-workflow.yaml
@@ -8,6 +8,12 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+  actions: read
+
 jobs:
   build:
     uses: daemonless/dbuild/.github/workflows/daemonless-build.yaml@main