Fix CI permissions on tag (#386)

Author: wtripp180901

.github/workflows/tag.yaml

@@ -6,11 +6,19 @@ on:
 
 jobs:
   publish_images:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
+      security-events: write
     uses: ./.github/workflows/publish-images.yaml
     with:
       ref: ${{ github.ref }}
 
   publish_charts:
+    permissions:
+      contents: write
+      pull-requests: write
     needs: [publish_images]
     uses: ./.github/workflows/publish-charts.yaml
     with: