wip

Signed-off-by: Matteo Mortari <matteo.mortari@gmail.com>

Author: tarilabs

.github/workflows/build-and-push-image.yml

@@ -2,7 +2,7 @@ name: Container image build and tag
 on:
   push:
     branches:
-      - 'main'
+      - 'tarilabs-20250912'
     tags:
       - 'v*'
     paths-ignore:
@@ -29,7 +29,8 @@ jobs:
     uses: ./.github/workflows/prepare.yml
   build-image:
     permissions:
-      contents: read
+      actions: read # anchore/sbom-action for syft
+      contents: write # anchore/sbom-action for syft
       packages: write
     runs-on: ubuntu-latest
     needs: prepare