.

.github/workflows/test-results.yml

@@ -2,23 +2,24 @@ name: Test Results
 
 on:
   workflow_call:
-permissions:
-  checks: write
-  # needed unless run with comment_mode: off
-  pull-requests: write
-  # only needed for private repository
-  contents: read
-  # only needed for private repository
-  issues: read
-  # required by download step to access artifacts API
-  actions: read
 
 jobs:
   test-results:
     name: Test Results
     runs-on: ubuntu-latest
     if: github.event.workflow_run.conclusion != 'skipped'
 
+    permissions:
+      checks: write
+      # needed unless run with comment_mode: off
+      pull-requests: write
+      # only needed for private repository
+      contents: read
+      # only needed for private repository
+      issues: read
+      # required by download step to access artifacts API
+      actions: read
+
     steps:
       - name: Download and Extract Artifacts
         env: