ci: permissions og ubuntu-latest

Author: Kyrremann

.github/workflows/check-dist.yml

@@ -16,6 +16,10 @@ on:
       - 'actions/spa-setup-task/**'
   workflow_dispatch:
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   check-dist:
     runs-on: ubuntu-latest

.github/workflows/master.yaml

@@ -16,7 +16,7 @@ env:
 jobs:
   check:
     name: Static analysis
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
@@ -26,7 +26,7 @@ jobs:
 
   test:
     name: Tests
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
@@ -36,7 +36,7 @@ jobs:
 
   build_and_push:
     name: Build, push and sign images
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     needs: [check, test]
     permissions:
       contents: "read"
@@ -193,7 +193,10 @@ jobs:
     if: github.ref == 'refs/heads/master'
     needs:
       - build_and_push
-    runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: write
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # ratchet:actions/checkout@v6