publish_docker: add permissions

Author: lacraig2

.github/workflows/publish_docker.yml

@@ -10,7 +10,7 @@ env:
   PANDA_CONTAINER_UBUNTU_VERSION: '20.04'
 
 jobs:
-  create_release:
+  get_version:
     if: github.repository  == 'panda-re/panda' && github.ref == 'refs/heads/dev'
     runs-on: panda-arc
     outputs:
@@ -26,7 +26,7 @@ jobs:
           use_api: true
 
   build_docker:
-    needs: create_release
+    needs: get_version
     runs-on: panda-arc
     if: github.repository  == 'panda-re/panda' && github.ref == 'refs/heads/dev'
     steps:
@@ -73,7 +73,7 @@ jobs:
           context: ${{ github.workspace }}
           tags: |
             pandare/panda:${{ github.sha }}
-            pandare/panda:${{ needs.create_release.outputs.v-version }}
+            pandare/panda:${{ needs.get_version.outputs.v-version }}
             pandare/panda:latest
           cache-from: |
             type=registry,ref=${{secrets.PANDA_ARC_REGISTRY}}/pandare/panda:cache,mode=max
@@ -90,7 +90,7 @@ jobs:
           context: ${{ github.workspace }}
           tags: |
             pandare/pandadev:${{ github.sha }}
-            pandare/pandadev:${{ needs.create_release.outputs.v-version }}
+            pandare/pandadev:${{ needs.get_version.outputs.v-version }}
             pandare/pandadev:latest
           cache-from: |
             type=registry,ref=${{secrets.PANDA_ARC_REGISTRY}}/pandare/panda:cache,mode=max
@@ -105,7 +105,7 @@ jobs:
 
   build_release_assets:
     if: github.repository  == 'panda-re/panda' && github.ref == 'refs/heads/dev'
-    needs: create_release
+    needs: get_version
     runs-on: panda-arc
     strategy:
       matrix:
@@ -189,14 +189,15 @@ jobs:
     name: Publish Python 🐍 distribution 📦 to PyPI and Make Release
     if: github.repository  == 'panda-re/panda' && github.ref == 'refs/heads/dev'
     needs:
-    - create_release
+    - get_version
     - build_release_assets
     runs-on: ubuntu-latest
     environment:
       name: pypi
       url: https://pypi.org/p/pandare  # Replace <package-name> with your PyPI project name
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
+      contents: write  # IMPORTANT: mandatory for creating releases
 
     steps:
     - name: Download all the artifacts
@@ -220,11 +221,11 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
-        tag_name: ${{ needs.create_release.outputs.v-version }}
+        tag_name: ${{ needs.get_version.outputs.v-version }}
         draft: false
         generate_release_notes: true
         prerelease: false
-        name: ${{ needs.create_release.outputs.v-version }} @ ${{ github.ref }}
+        name: ${{ needs.get_version.outputs.v-version }} @ ${{ github.ref }}
         files: |
           dist/*
           debs/*