docs(readme): update version and fix value for aws_role_to_assume (#16)

* docs(readme): update version and fix value for aws_role_to_assume

* docs(ecr-iam-role): add required permission to sample block

Author: fernandoataoldotcom

README.md

@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Build and Push Container to ghcr.io
-        uses: GlueOps/[email protected].0
+        uses: GlueOps/[email protected].2
 ```
 
 #### **Docker Hub (docker.io)**
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Build and Push Container to docker.io
-        uses: GlueOps/[email protected].0
+        uses: GlueOps/[email protected].2
         with:
           registry: "docker.io"
           dockerhub_username: ${{ secrets.DOCKERHUB_USERNAME }}
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Build and Push Container to ECR
-        uses: GlueOps/[email protected].0
+        uses: GlueOps/[email protected].2
         with:
           registry: "<aws-account-id>.dkr.ecr.<aws-region>.amazonaws.com"
           aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
@@ -98,15 +98,16 @@ on:
 
 permissions:
   id-token: write
+  contents: read # required because configuring permissions removes all permissions not declared
 
 jobs:
   build_and_push:
     runs-on: ubuntu-latest
     steps:
       - name: Build and Push Container to ECR
-        uses: GlueOps/[email protected].0
+        uses: GlueOps/[email protected].2
         with:
           registry: "<aws-account-id>.dkr.ecr.<aws-region>.amazonaws.com"
-          aws_role_to_assume: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws_role_to_assume: ${{ secrets.AWS_ECR_ROLE_ARN }}
           aws_default_region: ${{ env.AWS_REGION}}
 ```