From acc32c03432e0e5c1dcc4e332481e083e9e7d9d8 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Fri, 6 Mar 2026 19:32:10 +0100
Subject: [PATCH] ci: Actually fix rollbacks

---
 .github/workflows/ci.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 32653fb..022704a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -121,13 +121,11 @@ jobs:
     if: always() && needs.await-deploy.result == 'failure'
     needs: [trigger-deploy, await-deploy]
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      workflows: write
     steps:
       - uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          token: ${{ secrets.PAT }}
       - name: Rollback deploy branch
         run: |
           previous_sha="${{ needs.trigger-deploy.outputs.previous-sha }}"