release on ghcr

.github/workflows/go-ossf-slsa3-publish.yml

@@ -3,14 +3,15 @@ on:
   release:
     types: [created]
 
-permissions: read-all
+permissions:
+  contents: write
+  packages: write
+  id-token: write
 
 jobs:
   build:
     outputs:
       hashes: ${{ steps.hash.outputs.hashes }}
-    permissions:
-      contents: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -22,6 +23,19 @@ jobs:
         with:
           go-version: '1.26.2'
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         id: run-goreleaser