diff --git a/.github/workflows/build-lint-push-containers.yml b/.github/workflows/build-lint-push-containers.yml
index bd363935..769d3134 100644
--- a/.github/workflows/build-lint-push-containers.yml
+++ b/.github/workflows/build-lint-push-containers.yml
@@ -16,10 +16,6 @@ env:
   TEMPORARY_TAG: temporary
   DOCKERFILE_PATH: util/Dockerfile
 
-permissions:
-  id-token: write
-  contents: read    # This is required for actions/checkout
-
 jobs:
   # Lint Dockerfile using Hadolint
   # dockerfile-linter:
@@ -27,7 +23,7 @@ jobs:
   #   steps:
   #     -
   #       name: Checkout
-  #       uses: actions/checkout@v2
+  #       uses: actions/checkout@v3
   #     -
   #       name: Install Hadolint
   #       run: |
@@ -101,6 +97,9 @@ jobs:
     # needs: container-linter
     needs: container-build
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read    # This is required for actions/checkout
     steps:
       -
         name: Get container image from shared