move permissions

Author: henderkes

.github/workflows/build-images.yml

@@ -10,9 +10,7 @@ on:
             - .github/workflows/build-images.yml
     workflow_dispatch:
 
-permissions:
-    contents: read
-    packages: write
+permissions: {}
 
 env:
     REGISTRY: ghcr.io
@@ -21,6 +19,9 @@ env:
 jobs:
     build:
         name: Build (${{ matrix.image.name }} ${{ matrix.platform.arch }})
+        permissions:
+            contents: read
+            packages: write
         strategy:
             fail-fast: false
             matrix:
@@ -92,6 +93,8 @@ jobs:
         name: Merge manifest (${{ matrix.image }})
         runs-on: ubuntu-24.04
         needs: build
+        permissions:
+            packages: write
         strategy:
             fail-fast: false
             matrix: