Fix permissions set on docker build/publish and align with main & release workflows

Author: giom-l

.github/workflows/docker_build.yml

@@ -12,7 +12,6 @@ on:
 
 permissions:
   contents: read
-  packages: write
 
 jobs:
   build:

.github/workflows/docker_publish.yml

@@ -11,6 +11,10 @@ on:
         required: true
         type: string        
 
+permissions:
+  packages: write
+  id-token: write # Required to authenticate with OIDC for AWS
+
 jobs:
   deploy:
     continue-on-error: true

.github/workflows/main.yml

@@ -51,7 +51,6 @@ jobs:
     needs: jar-build
     permissions:
       contents: read
-      packages: write
     uses: ./.github/workflows/docker_build.yml
     secrets: inherit
     with:
@@ -61,9 +60,8 @@ jobs:
   docker-deploy: 
     needs: [jar-build, docker-build]
     permissions:
-      contents: read # To read secrets
-      id-token: write # This is required for requesting the JWT
       packages: write
+      id-token: write # Required to authenticate with OIDC for AWS
     uses: ./.github/workflows/docker_publish.yml
     secrets: inherit
     with:

.github/workflows/release.yml

@@ -57,7 +57,6 @@ jobs:
     needs: release
     permissions:
       contents: read
-      packages: write
     uses: ./.github/workflows/docker_build.yml
     secrets: inherit
     with:
@@ -67,9 +66,8 @@ jobs:
   docker-deploy:
     needs: [release, docker-build]
     permissions:
-      contents: read # To read secrets
-      id-token: write # This is required for requesting the JWT
       packages: write
+      id-token: write # Required to authenticate with OIDC for AWS
     uses: ./.github/workflows/docker_publish.yml
     secrets: inherit
     with: