permissions for github_token

Author: iankityadav

.github/workflows/docker-image.yml

@@ -11,15 +11,18 @@ env:
   IMAGE_NAME: ${{ github.repository }}
 
 jobs:
-
-  build:
-
+  build-and-push-image:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+      
     steps:
-    - uses: actions/checkout@v4
-    - name: Build the Docker image
-      run: docker build . --file Dockerfile --tag finance:$(date +%s)
+    - name: Checkout repository
+      uses: actions/checkout@v4
 
     - name: Login to GitHub Packages
       uses: docker/login-action@v2
@@ -28,7 +31,7 @@ jobs:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: Push the Docker image to GitHub Packages
-      uses: docker/build-push-action@v2
+      uses: docker/build-push-action@v6
       with:
         context: .
         push: true