[CI] Add required permissions for deploy token

Author: daipham3213

.github/workflows/build.yml

@@ -3,6 +3,15 @@ on:
   push:
     branches: [main]
 
+permissions:
+  contents: read
+
+# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
+# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -21,14 +30,28 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: 'build-artifacts'
-          path: 'dist/*'
+          path: './dist/*'
   deploy:
+    runs-on: ubuntu-latest
+    needs: build
+    permissions:
+      id-token: write
+      pages: write
+      contents: write
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-latest
-    needs: build
     steps:
+      - name: Setup Pages
+        uses: actions/configure-pages@v5
+      - name: 'Getting artifacts'
+        uses: actions/download-artifact@v4
+        with:
+          name: 'build-artifacts'
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: '.'
       - name: Deploy to GitHub Pages
         id: deployment
         uses: actions/deploy-pages@v4