This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new 98c0312b2f Improved: Grant the packages write permission of the docker
image workflow to its job (OFBIZ-13646)
98c0312b2f is described below
commit 98c0312b2fbb19d3c803253fd97ffaef0f276a26
Author: Mridul Pathak <[email protected]>
AuthorDate: Mon Oct 5 11:06:34 2026 +0530
Improved: Grant the packages write permission of the docker image workflow
to its job (OFBIZ-13646)
The workflow that builds and pushes the docker images declared the packages
write permission at the top level, so that it applied to the whole workflow,
while only the docker_build job, which pushes the images to the container
registry, needs it.
The top level keeps contents read, and the docker_build job now declares
contents read and packages write itself. As the workflow has a single job, the
permissions that job gets do not change.
(cherry picked from commit cef987c8c67f065c41017ed8c939dd6b00a2ec6f)
---
.github/workflows/docker-image.yml | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/docker-image.yml
b/.github/workflows/docker-image.yml
index 853cc0e5a2..793edf527b 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -46,12 +46,15 @@ on:
permissions:
contents: read
- packages: write
jobs:
docker_build:
name: Build and push OFBiz docker container images
runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ # Needed to push the container images to the GitHub container registry
(ghcr.io).
+ packages: write
steps:
- name: Check out OFBiz sources
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
