Provide required permissions for reusable workflow

Author: Oleg

.github/workflows/build.yml

@@ -46,6 +46,12 @@ jobs:
   build:
     needs: meta
 
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+      packages: write
+
     uses: ./.github/workflows/build-image.yml
     with:
       image-name: ${{ needs.meta.outputs.implementation-name }}
@@ -113,6 +119,12 @@ jobs:
   publish-on-automerge:
     needs: [meta, automerge]
 
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+      packages: write
+
     uses: ./.github/workflows/build-image.yml
     with:
       image-name: ${{ needs.meta.outputs.implementation-name }}