CI: add package write perms / nit specify :latest / string not bool

Author: plowsof

.github/workflows/ci.yml

@@ -22,6 +22,9 @@ jobs:
       - name: build site
         run: bundle exec jekyll build --limit-posts 10
   docker-build:
+    permissions:
+      contents: read
+      packages: write
     runs-on: ubuntu-22.04
     name: Dockerised Jekyll Build
     steps:
@@ -48,20 +51,20 @@ jobs:
         run: |
           tag_name="ghcr.io/${GITHUB_REPOSITORY_OWNER}/monero-site-ruby:latest"
           case "${{ steps.changes.outputs.rebuild }}" in
-            true)
+            "true")
               docker build -t "$tag_name" .
               ;;
             *)
               docker pull "$tag_name" || docker build -t "$tag_name" .
               ;;
           esac
       - name: Build Jekyll site with Docker
-        run: docker run -v $(pwd):/srv/jekyll ghcr.io/${GITHUB_REPOSITORY_OWNER}/monero-site-ruby bundle exec jekyll build --limit-posts 10
+        run: docker run -v $(pwd):/srv/jekyll ghcr.io/${GITHUB_REPOSITORY_OWNER}/monero-site-ruby:latest bundle exec jekyll build --limit-posts 10
       - name: Push new image to ghcr
         if: github.event_name == 'push' && github.ref == 'refs/heads/master'
         run: docker push -a ghcr.io/${GITHUB_REPOSITORY_OWNER}/monero-site-ruby
       - name: Confirm Gemfile update
-        if: steps.changes.outputs.diff_gemfile
+        if: steps.changes.outputs.diff_gemfile == "true"
         run: |
           cp Gemfile.lock Gemfile.lock.update
           docker run -v $(pwd):/srv/jekyll ghcr.io/${GITHUB_REPOSITORY_OWNER}/monero-site-ruby bundle update