[centos-workstation] fix registry perms for build job #4

	name: Build containers

	on:
	pull_request:
	branches: [main]
	push:
	branches:
	- "main"
	# for merge queue
	merge_group:
	workflow_dispatch:

	env:
	IMAGE_NAME: ${{ github.repository }}

	permissions:
	contents: read
	packages: write
	id-token: write

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref \|\| github.run_id }}
	cancel-in-progress: true

	jobs:
	build:
	runs-on: ubuntu-22.04
	steps:
	- name: Checkout repo
	uses: actions/checkout@v4

	- name: Build image
	uses: redhat-actions/buildah-build@v2
	with:
	image: ${{ env.IMAGE_NAME }}
	tags: "latest"
	containerfiles: Containerfile

	# Workaround bug where capital letters in your GitHub username make it impossible to push to GHCR.
	# https://github.com/macbre/push-to-ghcr/issues/12
	- name: Lowercase Registry
	id: registry_case
	uses: ASzc/change-string-case-action@v6
	with:
	string: ${{ env.IMAGE_REGISTRY }}

	- name: Login to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	# Push the image to GHCR (Image Registry)
	- name: Push To GHCR
	uses: redhat-actions/push-to-registry@v2
	if: github.event_name != 'pull_request'
	id: push
	with:
	registry: "ghcr.io"
	image: ${{ env.IMAGE_NAME }}
	tags: "latest"
	extra-args: \|
	--disable-content-trust

Provide feedback