bug: git tag -f needs moved, add permissions to publish workflows (getporter#2985)

* bug: git tag -f needs moved, add permissions to publish workflows

Signed-off-by: Sarah Christoff <[email protected]>

---------

Signed-off-by: Sarah Christoff <[email protected]>

Author: schristoff

.github/workflows/build_pipelinesrelease_template.yml

@@ -128,6 +128,7 @@ jobs:
     - Validate-integration_test
     - Validate-smoke_test
     runs-on: ubuntu-latest
+    permissions: write-all
     if: success() && inputs.shouldPublish
     steps:
     - name: checkout
@@ -161,6 +162,7 @@ jobs:
     - Validate-integration_test
     - Validate-smoke_test
     runs-on: ubuntu-latest
+    permissions: write-all
     if: success() && inputs.shouldPublish
     steps:
     - name: checkout

magefile.go

@@ -487,7 +487,7 @@ func PublishPorter() {
 	// Create or update GitHub release for the permalink (canary/latest) with the version's assets (porter binaries, exec binaries and install scripts)
 	if info.ShouldPublishPermalink() {
 		// Move the permalink tag. The existing release automatically points to the tag.
-		must.RunV("git", "tag", info.Permalink, info.Version+"-f")
+		must.RunV("git", "tag", "-f", info.Permalink, info.Version)
 		must.RunV("git", "push", "-f", remote, info.Permalink)
 
 		releases.AddFilesToRelease(repo, info.Permalink, porterVersionDir)