Revert "fix(docker/build-image)!: add write cache permission"

neilime · neilime · commit 6c31d7603a3c · 2026-07-01T14:48:25.000+02:00
This reverts commit 76ec7e7.
diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
@@ -21,7 +21,7 @@ jobs:
   ci:
     uses: ./.github/workflows/__shared-ci.yml
     permissions:
-      actions: write
+      actions: read
       contents: read
       id-token: write
       issues: write
diff --git a/.github/workflows/__pull-request-ci.yml b/.github/workflows/__pull-request-ci.yml
@@ -16,7 +16,7 @@ jobs:
   ci:
     uses: ./.github/workflows/__shared-ci.yml
     permissions:
-      actions: write
+      actions: read
       contents: read
       id-token: write
       issues: write
diff --git a/.github/workflows/__shared-ci.yml b/.github/workflows/__shared-ci.yml
@@ -25,15 +25,13 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-action-docker-build-image.yml
     permissions:
-      actions: write
       contents: read
       packages: write
 
   test-action-docker-create-images-manifests:
     needs: linter
     uses: ./.github/workflows/__test-action-docker-create-images-manifests.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -45,7 +43,6 @@ jobs:
     # yamllint disable-line rule:line-length
     uses: ./.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -87,7 +84,6 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-action-helm-test-chart.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -99,7 +95,6 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-building.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -113,7 +108,6 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-caching.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -127,7 +121,6 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-multi-registry.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -141,7 +134,6 @@ jobs:
     needs: linter
     uses: ./.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-action-docker-create-images-manifests.yml b/.github/workflows/__test-action-docker-create-images-manifests.yml
@@ -12,7 +12,6 @@ jobs:
     name: Arrange - Build original tag
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml b/.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml
@@ -69,7 +69,6 @@ jobs:
     needs: arrange-prepare-variables
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-action-helm-test-chart.yml b/.github/workflows/__test-action-helm-test-chart.yml
@@ -11,7 +11,6 @@ jobs:
   build-test-images:
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-workflow-docker-build-images-building.yml b/.github/workflows/__test-workflow-docker-build-images-building.yml
@@ -16,7 +16,6 @@ jobs:
     name: Arrange - Build with args, secrets
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-workflow-docker-build-images-caching.yml b/.github/workflows/__test-workflow-docker-build-images-caching.yml
@@ -64,7 +64,6 @@ jobs:
     needs: arrange
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
@@ -101,7 +100,6 @@ jobs:
     needs: arrange
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-workflow-docker-build-images-multi-registry.yml b/.github/workflows/__test-workflow-docker-build-images-multi-registry.yml
@@ -15,7 +15,6 @@ jobs:
     name: Act - Build images with structured registry inputs
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml b/.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml
@@ -90,7 +90,6 @@ jobs:
       matrix: ${{ fromJson(needs.arrange.outputs.matrix) }}
     uses: ./.github/workflows/docker-build-images.yml
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/docker-build-images.md b/.github/workflows/docker-build-images.md
@@ -54,7 +54,6 @@ jobs:
   docker-build-images:
     uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@cfc7074e26bbfbdf33f163d209d2c14957358152 # 0.38.0
     permissions:
-      actions: write
       contents: read
       id-token: write
       issues: read
diff --git a/.github/workflows/docker-build-images.yml b/.github/workflows/docker-build-images.yml
@@ -366,7 +366,6 @@ jobs:
       matrix:
         image: ${{ fromJson(needs.prepare-variables.outputs.images) }}
     permissions:
-      actions: write # Required for gha cache backend
       contents: read
       pull-requests: read
       issues: read
diff --git a/actions/docker/build-image/README.md b/actions/docker/build-image/README.md
@@ -38,7 +38,6 @@ If default GitHub token is used, the following permissions are required:
 
 ```yml
 permissions:
-  actions: write # Required for gha cache backend
   contents: read
   packages: write
 ```
