Merge pull request #299 from mathieu-benoit/patch-1

Add `docker` in Dependabot

Author: Harsh4902

.github/dependabot.yml

@@ -14,3 +14,10 @@ updates:
       day: sunday
     open-pull-requests-limit: 3
     rebase-strategy: disabled
+  - package-ecosystem: docker
+    directory: build/
+    schedule:
+      interval: monthly
+      day: sunday
+    open-pull-requests-limit: 3
+    rebase-strategy: disabled

.github/workflows/build-verify.yml

@@ -14,12 +14,13 @@ on:
       - '*.md'
 permissions: 
   contents: read
-  id-token: write # needed for signing the images with GitHub OIDC Token
 
 jobs:
   build-verify-package:
     runs-on: ubuntu-latest
     environment: Build
+    permissions: 
+      id-token: write # needed for signing the images with GitHub OIDC Token
     steps:
       - name: Get current date
         id: date