added more fine grain permissions #4

	name: Release

	on:
	push:
	tags:
	- "v*" # Trigger on version tags

	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}
	TAG_NAME: ${{ github.ref_name }}

	jobs:
	release:
	runs-on: ubuntu-latest
	permissions:
	contents: write # Needed for creating releases
	packages: write # Needed for ghcr.io push

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: "stable"

	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Log in to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Install dependencies
	run: \|
	make

	- name: Build installer YAML
	run: \|
	make build-installer IMG=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}

	- name: Build and push Docker images
	run: \|
	make docker-buildx IMG=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}

	- name: Create Release
	uses: softprops/action-gh-release@v2
	with:
	files: dist/install.yaml
	generate_release_notes: true
	draft: true
	prerelease: false
	make_latest: true
	token: ${{ secrets.GITHUB_TOKEN }}

Provide feedback