add write permission for artifact deletion

.github/workflows/test_docker_debian_codename_sub.yml

@@ -29,6 +29,9 @@ on:
           type: number
           default: 5000
 
+permissions:
+  actions: write
+
 # let only one instance run the test so cache is not corrupted.
 # cancel already running instances as only the last run will be relevant
 concurrency:
@@ -170,6 +173,8 @@ jobs:
 
   # cleanup after test execution
   cleanup:
+    permissions:
+      actions: write
     # run only if tests didn't fail: keep the artifact to make job reruns possible
     if: ${{ !failure() }}
     needs: [build, test]
@@ -180,3 +185,5 @@ jobs:
           uses: geekyeggo/delete-artifact@v4
           with:
             name: ${{ needs.build.outputs.image_file_name }}
+            # on PRs no write permissions are granted, so this fails in this cases
+            failOnError: false