chore: add proper permission to github release workflow

Signed-off-by: Keshav Priyadarshi <git@keshav.space>

Author: keshav-space

.github/workflows/publish-docker-image.yml

@@ -37,7 +37,6 @@ jobs:
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
-            type=sha,event=workflow_dispatch,enable=${{ !startsWith(github.ref, 'refs/tags/') }}
             type=semver,pattern={{version}}
           labels: |
             org.opencontainers.image.title=VulnerableCode
@@ -60,6 +59,7 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           annotations: ${{ steps.meta.outputs.annotations }}
+          provenance: false
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8  #  v4.2.2

.github/workflows/pypi-release.yml

@@ -50,6 +50,8 @@ jobs:
     needs:
       - build-pypi-distribs
     runs-on: ubuntu-24.04
+    permissions:
+      contents: write
 
     steps:
       - name: Download built archives