Update GitHub Actions workflow to add permissions for id-token, packa… #1

	name: Build, Push, Release, and Attest Docker Image

	on:
	push:
	tags:
	- 'v*'

	jobs:
	build-push-release-attest:
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	packages: write
	contents: read
	attestations: write
	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: openchai/aria2-initrd

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3

	- name: Log in to GitHub Container Registry
	uses: docker/login-action@v2
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Extract version from tag
	id: extract-version
	run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV

	- name: Build and push image
	id: push
	uses: docker/[email protected]
	with:
	context: .
	push: true
	tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.VERSION }}

	- name: Create GitHub Release
	id: create_release
	uses: actions/create-release@v1
	with:
	tag_name: ${{ env.VERSION }}
	release_name: Release ${{ env.VERSION }}
	draft: false
	prerelease: false
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Attest
	uses: actions/attest-build-provenance@v1
	id: attest
	with:
	subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.VERSION }}
	subject-digest: ${{ steps.push.outputs.digest }}
	push-to-registry: true

Provide feedback