New fine-grained permission for artifact metadata is now generally available
Source: GitHub Actions Blog
New artifact_metadata permission
GitHub has introduced a new artifact_metadata permission to give you more precise control over API access to artifact‑related metadata. This permission replaces the broader contents:read and contents:write permissions for the artifact metadata APIs.
Transition any workflows currently using the contents permission for artifact metadata APIs to the new artifact_metadata permission before February 3, 2026, when support for the old permission will be deprecated.