fix(docker/build-image)!: add write cache permission

Signed-off-by: Emilien Escalle <emilien.escalle@escemi.com>

Author: neilime

.github/workflows/__main-ci.yml

@@ -21,7 +21,7 @@ jobs:
   ci:
     uses: ./.github/workflows/__shared-ci.yml
     permissions:
-      actions: read
+      actions: write
       contents: read
       id-token: write
       issues: write

.github/workflows/__pull-request-ci.yml

@@ -16,7 +16,7 @@ jobs:
   ci:
     uses: ./.github/workflows/__shared-ci.yml
     permissions:
-      actions: read
+      actions: write
       contents: read
       id-token: write
       issues: write

.github/workflows/__shared-ci.yml

@@ -95,6 +95,7 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-building.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read
@@ -108,6 +109,7 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-caching.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read
@@ -121,6 +123,7 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-multi-registry.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read
@@ -134,6 +137,7 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml

@@ -69,6 +69,7 @@ jobs:
     needs: arrange-prepare-variables
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/__test-workflow-docker-build-images-building.yml

@@ -16,6 +16,7 @@ jobs:
     name: Arrange - Build with args, secrets
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/__test-workflow-docker-build-images-caching.yml

@@ -64,6 +64,7 @@ jobs:
     needs: arrange
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/__test-workflow-docker-build-images-multi-registry.yml

@@ -15,6 +15,7 @@ jobs:
     name: Act - Build images with structured registry inputs
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml

@@ -90,6 +90,7 @@ jobs:
       matrix: ${{ fromJson(needs.arrange.outputs.matrix) }}
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/docker-build-images.md

@@ -53,6 +53,7 @@ jobs:
   docker-build-images:
     uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@c9088e8447c5a8be45157e17701023fc50ccb1c0 # 0.37.2
     permissions:
+      actions: write
       contents: read
       id-token: write
       issues: read

.github/workflows/docker-build-images.yml

@@ -366,6 +366,7 @@ jobs:
       matrix:
         image: ${{ fromJson(needs.prepare-variables.outputs.images) }}
     permissions:
+      actions: write # Required for gha cache backend
       contents: read
       pull-requests: read
       issues: read