Issue with pushing a tags and publishing releases from CI

[newhoggy]

I seem to be unable to push tags in CI to the repository:

https://github.com/haskell/cabal-cache/actions/runs/12428733304/job/34701883949

I've forked to haskell-works and the pushing of a tag works in that organisation:

https://github.com/haskell-works/cabal-cache/actions/runs/12443814642/job/34743994764

I also have a separate issue of not being able to publish releases:

https://github.com/haskell/cabal-cache/actions/runs/12434251989

Is there possible an organisation level policy that is blocking CI from doing these sorts of things?

[newhoggy]

@hasufell do you have any ideas?

[hasufell]

I'm not sure, tagging @Bodigrim

[Bodigrim]

I think there are organisation-wide permissions for bots and probably they are different between haskell and haskell-works. The organisation settings are quite a maze; @newhoggy do you possibly remember how you set it up in haskell-works?