From 122cda30e51133f4651dda5495a3ab3840e82b4e Mon Sep 17 00:00:00 2001
From: "hoverkraft-bot[bot]"
 <128996893+hoverkraft-bot[bot]@users.noreply.github.com>
Date: Fri, 15 May 2026 05:46:19 +0000
Subject: [PATCH] docs: update actions and workflows documentation

[skip ci]

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
---
 .github/workflows/docker-build-images.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/docker-build-images.md b/.github/workflows/docker-build-images.md
index 1b77faa3..174d1f46 100644
--- a/.github/workflows/docker-build-images.md
+++ b/.github/workflows/docker-build-images.md
@@ -51,7 +51,12 @@ permissions: {}
 jobs:
   docker-build-images:
     uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@2b647ed6f11d50cb6beb6d56333e68ba2c804826 # 0.33.1
-    permissions: {}
+    permissions:
+      contents: read
+      id-token: write
+      issues: read
+      packages: write
+      pull-requests: read
     secrets:
       # Password or GitHub token (`packages:read` and `packages:write` scopes) configuration used to log against OCI registries.
       # Accepts either a single password/token string (default format) or a JSON object using the same keys as `oci-registry`.