PoLP

[sbp-bvanb]

jobs:
  build-and-push-image:
    runs-on: ubuntu-20.04
    # Sets the permissions granted to the `GITHUB_TOKEN` for the actions in this job.
    permissions:
      contents: read
      packages: write
      #
    steps:

[030]

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs#defining-access-for-the-github_token-scopes