fix production release workflow permissions

brendan-kellam · brendan-kellam · commit b8fc073ab563 · 2026-01-12T16:42:24.000-08:00
diff --git a/.github/workflows/release-prod.yml b/.github/workflows/release-prod.yml
@@ -2,6 +2,8 @@ name: Release Sourcebot (Production)
 
 permissions:
   contents: read
+  packages: write
+  id-token: write
 
 on:
   workflow_dispatch:
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -1,6 +1,6 @@
 services:
   sourcebot:
-    image: ghcr.io/sourcebot-dev/sourcebot:latest
+    image: ghcr.io/sourcebot-dev/sourcebot:main
     pull_policy: always
     user: sourcebot
     restart: always
