From e31e9774a392479719bb120ae6faaa9b9bf62aa6 Mon Sep 17 00:00:00 2001
From: CaliBrain <calibrain@l4n.xyz>
Date: Sun, 11 Jan 2026 18:32:46 -0500
Subject: [PATCH] Update GitHub Actions workflow permissions (#416)

Added permissions for contents and packages.
---
 .github/workflows/build-and-publish-docker-image.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build-and-publish-docker-image.yml b/.github/workflows/build-and-publish-docker-image.yml
index 05e5c7de..2c960394 100644
--- a/.github/workflows/build-and-publish-docker-image.yml
+++ b/.github/workflows/build-and-publish-docker-image.yml
@@ -81,6 +81,9 @@ jobs:
     needs: build-and-push-images
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request'
+    permissions:
+      contents: read
+      packages: write
     env:
       # Legacy name for backwards compatibility (hardcoded so it works after rename)
       LEGACY_NAME: calibre-web-automated-book-downloader
@@ -138,4 +141,4 @@ jobs:
           create_alias "${STANDARD}" "${LEGACY_TOR}"
 
           # calibre-web-automated-book-downloader-extbp → lite image
-          create_alias "${LITE}" "${LEGACY_EXTBP}"
\ No newline at end of file
+          create_alias "${LITE}" "${LEGACY_EXTBP}"