Allow k8s-content workflow to write

[yuumasato]

Description:

• Grant write permission to the k8s-content workflow

Rationale:

• It seems that the permission is required to allow the workflow to sign the image.
• The upstream k8s content image has not been updated for a while.

Review Hints:

• Check the job logs:
  https://github.com/ComplianceAsCode/content/actions/workflows/k8s-content.yaml

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[codeclimate]

Code Climate has analyzed commit fc7440f and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 53.3% (0.0% change).

View more on Code Climate.

[yuumasato]

I'm not sure if this fixes the issue.
I had made the action to run on pull requests, but it didn't work:
https://github.com/ComplianceAsCode/content/actions/runs/5952262332

It could also be that this PR needs to be merged for the permissions to work properly.

[ggbecker]

I'm not sure if this fixes the issue. I had made the action to run on pull requests, but it didn't work: https://github.com/ComplianceAsCode/content/actions/runs/5952262332

It could also be that this PR needs to be merged for the permissions to work properly.

Let's merge and see how it behaves, if it doesn't help we can revert it.

[yuumasato]

@ggbecker It worked, we got a different error, 😂

The workflow is not valid. .github/workflows/k8s-content.yaml (Line: 9, Col: 3): Error calling workflow 'metal-toolbox/container-push/.github/workflows/container-push.yml@main'. The nested job 'container' is requesting 'contents: read, packages: write', but is only allowed 'contents: none, packages: none'. .github/workflows/k8s-content.yaml (Line: 9, Col: 3): Error calling workflow 'metal-toolbox/container-push/.github/workflows/container-push.yml@main'. The nested job 'sign' is requesting 'packages: write', but is only allowed 'packages: none'.

[yuumasato]

Actually, I see now the the error is the same as in my PR, 🤦

[yuumasato]

Following up on #11021