update parser

models/repo/repo_unit.go

@@ -206,7 +206,9 @@ func (p ActionsTokenPermissions) HasAccess(scope string, required perm.AccessMod
 	switch scope {
 	case "actions":
 		mode = p.Actions
-	case "code", "contents":
+	case "contents":
+		mode = min(p.Code, p.Releases)
+	case "code":
 		mode = p.Code
 	case "issues":
 		mode = p.Issues

services/actions/permission_parser.go

@@ -109,7 +109,10 @@ func parseRawPermissions(rawPerms *yaml.Node, defaultPerms repo_model.ActionsTok
 
 			// Map GitHub Actions scopes to Gitea units
 			switch scope {
-			case "code", "contents":
+			case "contents":
+				result.Code = accessMode
+				result.Releases = accessMode
+			case "code":
 				result.Code = accessMode
 			case "issues":
 				result.Issues = accessMode