diff --git a/.github/workflows/docker-build-push-dockerhub.yaml b/.github/workflows/docker-build-push-dockerhub.yaml
index c59692d..51940e6 100644
--- a/.github/workflows/docker-build-push-dockerhub.yaml
+++ b/.github/workflows/docker-build-push-dockerhub.yaml
@@ -115,6 +115,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
@@ -151,7 +152,7 @@ jobs:
           bash "$SCRIPT_PATH"
 
       - name: Build and push
-        uses: NethermindEth/github-action-image-build-and-push@fefef12a2baef6d339fb4b244b4cd45c40146161
+        uses: NethermindEth/github-action-image-build-and-push@972f8cf69d5ede0a0cb9d7cc953fa902538e2ffa
         with:
           registry: "dockerhub"
           image_name: ${{ inputs.repo_name }}/${{ inputs.image_name }}
diff --git a/.github/workflows/docker-build-push-jfrog.yaml b/.github/workflows/docker-build-push-jfrog.yaml
index d12d468..30ebd52 100644
--- a/.github/workflows/docker-build-push-jfrog.yaml
+++ b/.github/workflows/docker-build-push-jfrog.yaml
@@ -119,6 +119,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
@@ -184,7 +185,7 @@ jobs:
           bash "$SCRIPT_PATH"
 
       - name: Build and push
-        uses: NethermindEth/github-action-image-build-and-push@fefef12a2baef6d339fb4b244b4cd45c40146161
+        uses: NethermindEth/github-action-image-build-and-push@972f8cf69d5ede0a0cb9d7cc953fa902538e2ffa
         with:
           registry: "artifactory"
           image_name: ${{ steps.env-vars.outputs.IMAGE_NAME }}
diff --git a/.github/workflows/docker-promote-dockerhub.yaml b/.github/workflows/docker-promote-dockerhub.yaml
index b9693bf..26f7657 100644
--- a/.github/workflows/docker-promote-dockerhub.yaml
+++ b/.github/workflows/docker-promote-dockerhub.yaml
@@ -33,6 +33,12 @@ on:
         description: "Docker Hub password"
         required: true
 
+permissions:
+  id-token: write
+  attestations: write
+  artifact-metadata: write
+  contents: read
+
 jobs:
   promote:
     name: Promote Docker image
diff --git a/.github/workflows/docker-promote-jfrog.yaml b/.github/workflows/docker-promote-jfrog.yaml
index a1708a1..c094fb0 100644
--- a/.github/workflows/docker-promote-jfrog.yaml
+++ b/.github/workflows/docker-promote-jfrog.yaml
@@ -40,6 +40,12 @@ on:
         required: false
         default: false
 
+permissions:
+  id-token: write
+  attestations: write
+  artifact-metadata: write
+  contents: read
+
 jobs:
   promote:
     name: Promote Docker image
diff --git a/examples/docker/build-push-dockehub-complete.yml b/examples/docker/build-push-dockehub-complete.yml
index 2b3880f..5fd6bd1 100644
--- a/examples/docker/build-push-dockehub-complete.yml
+++ b/examples/docker/build-push-dockehub-complete.yml
@@ -8,6 +8,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
diff --git a/examples/docker/build-push-dockerhub-simple.yml b/examples/docker/build-push-dockerhub-simple.yml
index ca8fe2c..0fb1bde 100644
--- a/examples/docker/build-push-dockerhub-simple.yml
+++ b/examples/docker/build-push-dockerhub-simple.yml
@@ -10,6 +10,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
diff --git a/examples/docker/build-push-jfrog-complete.yml b/examples/docker/build-push-jfrog-complete.yml
index 52b78b8..75223d5 100644
--- a/examples/docker/build-push-jfrog-complete.yml
+++ b/examples/docker/build-push-jfrog-complete.yml
@@ -8,6 +8,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
diff --git a/examples/docker/build-push-jfrog-simple.yml b/examples/docker/build-push-jfrog-simple.yml
index a8e1acf..1bec6f4 100644
--- a/examples/docker/build-push-jfrog-simple.yml
+++ b/examples/docker/build-push-jfrog-simple.yml
@@ -10,6 +10,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
diff --git a/examples/docker/docker-push-multiple-jfrog.yaml b/examples/docker/docker-push-multiple-jfrog.yaml
index 36ab295..5cc4a7f 100644
--- a/examples/docker/docker-push-multiple-jfrog.yaml
+++ b/examples/docker/docker-push-multiple-jfrog.yaml
@@ -8,6 +8,7 @@ on:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
diff --git a/examples/docker/promote-dockerhub.yml b/examples/docker/promote-dockerhub.yml
index d043517..7e1ead1 100644
--- a/examples/docker/promote-dockerhub.yml
+++ b/examples/docker/promote-dockerhub.yml
@@ -15,6 +15,7 @@ concurrency:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs:
diff --git a/examples/docker/promote-jfrog.yml b/examples/docker/promote-jfrog.yml
index ac36e3d..56500dc 100644
--- a/examples/docker/promote-jfrog.yml
+++ b/examples/docker/promote-jfrog.yml
@@ -20,6 +20,7 @@ concurrency:
 permissions:
   id-token: write
   attestations: write
+  artifact-metadata: write
   contents: read
 
 jobs: