add permissions #8


	on:
	workflow_dispatch:
	pull_request:
	# Publish `main` as Docker `latest` image.
	branches:
	- master

	# Publish `v1.2.3` tags as releases.
	tags:
	- v*

	# Run tests for any PRs.
	push:

	env:
	# Image name
	IMAGE_NAME: server-bot-rust

	jobs:
	# Push image to GitHub Packages.
	# See also https://docs.docker.com/docker-hub/builds/
	push:

	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	if: github.event_name == 'push'

	steps:
	- uses: actions/checkout@v2
	# if credentials github needed
	# - uses: fusion-engineering/setup-git-credentials@v2
	# with:
	# credentials: ${{secrets.GIT_CREDENTIALS}}

	- name: Build image
	run: docker build . --file Dockerfile --tag $IMAGE_NAME --build-arg github_token=${{ secrets.GIT_CREDENTIALS }}

	- name: Log into registry
	run: echo "${{ secrets.GITHUB_TOKEN }}" \| docker login docker.pkg.github.com -u ${{ github.actor }} --password-stdin

	- name: Push image
	run: \|
	IMAGE_ID=docker.pkg.github.com/${{ github.repository }}/$IMAGE_NAME
	# Change all uppercase to lowercase
	IMAGE_ID=$(echo $IMAGE_ID \| tr '[A-Z]' '[a-z]')
	# Strip git ref prefix from version
	VERSION=$(echo "${{ github.ref }}" \| sed -e 's,./$.$,\1,')
	# Strip "v" prefix from tag name
	[[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION \| sed -e 's/^v//')
	# Use Docker `latest` tag convention
	[ "$VERSION" == "main" ] && VERSION=latest
	echo IMAGE_ID=$IMAGE_ID
	echo VERSION=$VERSION
	docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
	docker push $IMAGE_ID:$VERSION

Provide feedback