WIP

.github/workflows/3_docker.yml

@@ -4,9 +4,6 @@
 
 name: Docker
 
-permissions:
-  contents: "write"
-
 on:
   # this code should exist on the 'master' or 'main' branch
   # https://github.com/orgs/community/discussions/25288#discussioncomment-3247293
@@ -37,6 +34,9 @@ jobs:
     name: Create Release
     runs-on: ubuntu-latest
     needs: [ get-env-vars ]
+    permissions:
+      contents: read
+      packages: write
 
     # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#running-a-workflow-based-on-the-conclusion-of-another-workflow
     if: ${{ github.event.workflow_run.conclusion == 'success' }}