ISX-86: Update workflows. (#8)

* use dev branch

* push

* test

* test

* fix perms

* are perms needed?

* yes they are

* add perms to remaning workflows

* test

* test

* test

* test

* Update .github/workflows/build-image-from-tag-push.yml

* Also bump the version in the rebuild workflow.

---------

Co-authored-by: Alexander Cairns <[email protected]>

Author: adam-vessey

auto-semver.yml

@@ -23,5 +23,6 @@ jobs:
     permissions:
       id-token: write
       contents: read
+      packages: write
     with:
       tag: ${{ needs.update.outputs.tag }}

build-image-from-tag-push.yml

@@ -4,6 +4,7 @@ name: Build image from version tag
 permissions:
   id-token: write
   contents: read
+  packages: write
 on:
   push:
     # XXX: Tags pushed via actions (i.e., auto-semver) are not able to trigger additional workflows;
@@ -21,8 +22,9 @@ on:
 jobs:
   build:
     if: github.event_name == 'push' || github.event_name == 'pull_request'
-    uses: discoverygarden/docker-image-reusable-workflows/.github/workflows/build-image.yml@v1
+    uses: discoverygarden/docker-image-reusable-workflows/.github/workflows/build-image.yml@v2
     secrets: inherit
     with:
       image-name: ${{ vars.DOCKER_IMAGE_NAME }}
       tag: ${{ inputs.tag }}
+

rebuild-image.yml

@@ -4,6 +4,7 @@ name: Rebuild image
 permissions:
   id-token: write
   contents: read
+  packages: write
 on:
   schedule:
     - cron: '47 4 1 * *'
@@ -20,7 +21,7 @@ on:
 
 jobs:
   build:
-    uses: discoverygarden/docker-image-reusable-workflows/.github/workflows/build-image.yml@v1
+    uses: discoverygarden/docker-image-reusable-workflows/.github/workflows/build-image.yml@v2
     secrets: inherit
     with:
       env: ${{ inputs.env || github.event_name == 'pull_request' && 'dev' || 'prod' }}