From 583bc064a8574fb7a5eb195cb58f71c7a7078071 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:19:56 +0000
Subject: [PATCH 1/3] Initial plan


From 0e326f02c096a77ae09509d43d38672ee5459159 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:26:16 +0000
Subject: [PATCH 2/3] Fix publish-to-edge artifact race for backends charm

---
 .github/workflows/integration_test.yaml              | 3 +++
 .github/workflows/publish_charm_backends_config.yaml | 6 +++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/integration_test.yaml b/.github/workflows/integration_test.yaml
index 5058c6bf..a27eeb01 100644
--- a/.github/workflows/integration_test.yaml
+++ b/.github/workflows/integration_test.yaml
@@ -2,6 +2,9 @@ name: Integration tests
 
 on:
   pull_request:
+  push:
+    branches:
+      - main
   schedule:
   - cron: "0 15 * * SAT"
 
diff --git a/.github/workflows/publish_charm_backends_config.yaml b/.github/workflows/publish_charm_backends_config.yaml
index b98335ed..7a1e0730 100644
--- a/.github/workflows/publish_charm_backends_config.yaml
+++ b/.github/workflows/publish_charm_backends_config.yaml
@@ -2,12 +2,16 @@ name: Publish to edge for content-cache-backends-config
 
 on:
   workflow_dispatch:
-  push:
+  workflow_run:
+    workflows: ["Integration tests"]
+    types:
+      - completed
     branches:
       - main
 
 jobs:
   publish-to-edge:
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
     uses: canonical/operator-workflows/.github/workflows/publish_charm.yaml@main
     secrets: inherit
     with:

From c9f2578e1ff28833d87ac25b65cd646e6ec48ffe Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 7 Jul 2026 16:27:03 +0000
Subject: [PATCH 3/3] Set explicit minimal token permissions for publish
 workflow

---
 .github/workflows/publish_charm_backends_config.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/publish_charm_backends_config.yaml b/.github/workflows/publish_charm_backends_config.yaml
index 7a1e0730..d127baff 100644
--- a/.github/workflows/publish_charm_backends_config.yaml
+++ b/.github/workflows/publish_charm_backends_config.yaml
@@ -9,6 +9,10 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+  actions: read
+
 jobs:
   publish-to-edge:
     if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}