unset packages permission in reusable workflows

Signed-off-by: CrazyMax <[email protected]>

Author: crazy-max

.github/workflows/.test.yml

@@ -23,7 +23,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       output: image
       push: ${{ github.event_name != 'pull_request' }}
@@ -58,7 +57,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       output: image
       push: ${{ github.event_name != 'pull_request' }}
@@ -129,7 +127,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       output: image
       push: ${{ github.event_name != 'pull_request' }}
@@ -163,7 +160,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       output: image
       push: ${{ github.event_name != 'pull_request' }}
@@ -240,7 +236,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       output: local
       push: ${{ github.event_name != 'pull_request' }}
@@ -262,7 +257,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       output: local
       push: ${{ github.event_name != 'pull_request' }}
@@ -283,7 +277,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       runner: amd64
       output: image
@@ -299,7 +292,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       context: test
       target: hello
@@ -336,7 +328,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       context: test
       target: hello-cross
@@ -417,7 +408,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       context: test
       target: hello-cross
@@ -440,7 +430,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       context: test
       target: hello
@@ -463,7 +452,6 @@ jobs:
     permissions:
       contents: read
       id-token: write
-      packages: none
     with:
       runner: amd64
       context: test

.github/workflows/bake.yml

@@ -276,7 +276,6 @@ jobs:
     permissions:
       contents: read
       id-token: write # for signing attestation manifests and/or registry authentication with GitHub OIDC Token
-      packages: write # for pushing manifests to GHCR if needed
     strategy:
       fail-fast: false
       matrix:
@@ -660,7 +659,6 @@ jobs:
     permissions:
       contents: read
       id-token: write # for registry authentication with OIDC if needed
-      packages: write # for pushing to GHCR when merging manifests if needed
     outputs:
       cosign-version: ${{ env.COSIGN_VERSION }}
       cosign-verify-commands: ${{ steps.set.outputs.cosign-verify-commands }}

.github/workflows/build.yml

@@ -230,7 +230,6 @@ jobs:
     permissions:
       contents: read
       id-token: write # for signing attestation manifests and/or registry authentication with GitHub OIDC Token
-      packages: write # for pushing manifests to GHCR if needed
     strategy:
       fail-fast: false
       matrix:
@@ -554,7 +553,6 @@ jobs:
     permissions:
       contents: read
       id-token: write # for registry authentication with OIDC if needed
-      packages: write # for pushing to GHCR when merging manifests if needed
     outputs:
       cosign-version: ${{ env.COSIGN_VERSION }}
       cosign-verify-commands: ${{ steps.set.outputs.cosign-verify-commands }}