#369 Enable Docker push for SHA tag

Pushing a Docker image (even for testing purposes) requires respective
permissions.

Author: ascheman

.github/workflows/build-artifacts.yml

@@ -17,6 +17,8 @@ on:
     secrets:
       SONAR_TOKEN:
         required: false
+      GITHUB_TOKEN:
+        required: true
 
 env:
   SONAR_ORGANIZATION: ${{ secrets.SONAR_ORGANIZATION || 'aim42' }}
@@ -25,6 +27,9 @@ env:
 
 jobs:
   build:
+    env:
+      DOCKER_USERNAME: ${{ github.repository_owner }}
+      DOCKER_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
     runs-on: ubuntu-latest
     steps:
       - name: Check out

.github/workflows/gh-pages.yml

@@ -21,6 +21,8 @@ jobs:
     with:
       # SonarQube requires JDK 17 or higher
       java-version: '17'
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   pages:
     needs: build-artifacts

.github/workflows/gradle-build.yml

@@ -15,6 +15,9 @@ on:
 
 jobs:
   build-artifacts:
+    permissions:
+      packages: write
+      contents: read
     uses: ./.github/workflows/build-artifacts.yml
     with:
       # SonarQube requires JDK 17 or higher
@@ -23,6 +26,7 @@ jobs:
       push-docker-sha: true
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   test-gh-action:
     needs: build-artifacts

.github/workflows/test-java-os-mix.yml

@@ -13,6 +13,8 @@ jobs:
     with:
       # SonarQube requires JDK 17 or higher
       java-version: '17'
+    secrets:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   test-java-os-mix:
     needs: build-artifacts