From 5f746d9353a4db5225e326c3e42c8b108728ec9d Mon Sep 17 00:00:00 2001
From: Husen <hi@husen.id>
Date: Fri, 1 Aug 2025 04:28:16 +0700
Subject: [PATCH] ci: allow GITHUB_TOKEN to push OCI image & create a release

Signed-off-by: Husen <hi@husen.id>
---
 .github/workflows/main.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b3d64af..d995cc3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -54,6 +54,8 @@ jobs:
     needs: pretest
     if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
 
     steps:
       - name: Checkout
@@ -138,9 +140,11 @@ jobs:
 
   release:
     name: Release
-    runs-on: ubuntu-latest
     needs: test
     if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
 
     steps:
       - name: Checkout