Further tweak to the GitHub action

.github/workflows/build_image.yaml

@@ -1,40 +1,39 @@
 name: Build and upload docker image
 
-permissions:
-  id-token: write   # for JWT request
-  contents: read    # for actions/checkout
-
 on:
+  push:
+    branches:
+      - '**'
   workflow_dispatch:
     inputs:
       debug_enabled:
         type: boolean
         description: 'Run the build with tmate debugging enabled (https://github.com/marketplace/actions/debugging-with-tmate)'
         required: false
         default: false
-  push:
-    branches:
-      - '**'
+
+permissions:
+  id-token: write   # for JWT request
+  contents: read    # for actions/checkout
 
 jobs:
   docker-image-build:
     name: docker-image-build
     runs-on: ubuntu-latest
-    permissions:
-      id-token: write
-      contents: read
     steps:
       - name: Setup tmate session
         uses: mxschmitt/action-tmate@v3
         if: ${{ github.event_name == 'workflow_dispatch' && inputs.debug_enabled }}
         with:
           limit-access-to-actor: true
-      - uses: actions/[email protected]
+      - name: Checkout repo
+        uses: actions/[email protected]
       - name: Configure AWS Credentials
         uses: aws-actions/[email protected]
         with:
           role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME }}
           aws-region: eu-west-2
+          role-session-name: github-aws-access
       - name: Login to Amazon ECR
         id: login-ecr
         uses: aws-actions/[email protected]