update permissions

.github/workflows/example-build-docker.yml

@@ -5,6 +5,10 @@ on:
     branches:
       - 'example/pipeline-cherry' # or specify any branch you want to trigger this workflow on
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
@@ -32,7 +36,7 @@ jobs:
     - name: Build, tag, and push Docker image
       env:
         ECR_URI: "697698820969.dkr.ecr.us-east-1.amazonaws.com/web-app"
-        IMAGE_TAG: latest
+        IMAGE_TAG: latest-cherry-ecr
       run: |
         yarn --frozen-lockfile
         yarn nx build api-flowaccount-workshop