From 6d77aa017b9fbf18c29e9e9464dbe9d4c212bc2e Mon Sep 17 00:00:00 2001
From: Adil Hafeez <adil.hafeez@gmail.com>
Date: Tue, 12 Aug 2025 14:35:37 -0700
Subject: [PATCH] fix perm

---
 .github/workflows/ghrc-push-main.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ghrc-push-main.yml b/.github/workflows/ghrc-push-main.yml
index 141c5c19..a869d230 100644
--- a/.github/workflows/ghrc-push-main.yml
+++ b/.github/workflows/ghrc-push-main.yml
@@ -1,4 +1,4 @@
-name: Publish docker image (latest)
+name: Publish docker image to ghcr (latest)
 
 env:
   DOCKER_IMAGE: katanemo/archgw
@@ -47,6 +47,9 @@ jobs:
   # Build AMD64 image on GitHub's AMD64 runner
   build-amd64:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
@@ -79,6 +82,9 @@ jobs:
   # Combine ARM64 and AMD64 images into a multi-arch manifest
   create-manifest:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     needs: [build-arm64, build-amd64]  # Wait for both builds
     steps:
       - name: Log in to GitHub Container Registry