test: fix job permissions to upload container image to registry

ahwayakchih · Jan 16, 2025 · bcca140 · bcca140
1 parent 7b10ef8
commit bcca140
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.github/workflows/puppeteer-container.yml b/.github/workflows/puppeteer-container.yml
@@ -9,8 +9,17 @@ jobs:
 
   build:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+
     env:
+      REGISTRY: ghcr.io
       IMAGE_NAME: puppeteer
+
     steps:
       - name: Workaround Windows mess and set git to keep original line endings
         run: git config --global core.autocrlf false
@@ -34,7 +43,7 @@ jobs:
 
       - name: Login in to registry
         if: success()
-        run: echo "${{ secrets.GITHUB_TOKEN }}" | podman login ghcr.io -u ${{ github.actor }} --password-stdin
+        run: echo "${{ secrets.GITHUB_TOKEN }}" | podman login ${{ env.REGISTRY }} -u ${{ github.actor }} --password-stdin
 
       - name: Push container image
         if: success()