From 020d9aa3d1f97cc7861b7a0007a31f4389ae865e Mon Sep 17 00:00:00 2001
From: Matt Moore <mattmoor@chainguard.dev>
Date: Sun, 10 Mar 2024 14:54:24 -0700
Subject: [PATCH] Use an explicit permissions block (#11)

This is to let us drop the default `GITHUB_TOKEN` permissions

Signed-off-by: Matt Moore <mattmoor@chainguard.dev>
---
 .github/workflows/publish.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 03ba839..c90a60e 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -8,6 +8,8 @@ jobs:
   publish:
     name: Publish
     runs-on: ubuntu-latest
+    permissions:
+      packages: write # To publish container images
     steps:
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
@@ -15,4 +17,4 @@ jobs:
       - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
       - uses: ko-build/setup-ko@ace48d793556083a76f1e3e6068850c1f4a369aa # v0.6
-      - run: ko publish ./
+      - run: ko build .