Set permissions for dirs in docker image

Dockerfile

@@ -22,7 +22,8 @@ RUN adduser -D -g '' appuser
 COPY --from=builder /app/quay .
 
 RUN mkdir -p /storage /config && \
-    chown -R appuser:appuser /app /storage /config
+    chmod -R 777 /storage /config && \
+    chown -R appuser:appuser /app
 
 USER appuser
 

app/github/github.go

@@ -35,7 +35,9 @@ func FetchAndDeployBranch(repoOwner, repoName, branch, pat, destDir string) erro
 		return fmt.Errorf("GitHub returned %s for %s", resp.Status, archiveURL)
 	}
 
-	tmpZip, err := os.CreateTemp("", "ghbranch-*.zip")
+	storageRoot := filepath.Dir(destDir)
+
+	tmpZip, err := os.CreateTemp(storageRoot, "ghbranch-*.zip")
 	if err != nil {
 		return fmt.Errorf("creating temp zip: %w", err)
 	}
@@ -47,7 +49,7 @@ func FetchAndDeployBranch(repoOwner, repoName, branch, pat, destDir string) erro
 	}
 	tmpZip.Close()
 
-	tmpDir, err := os.MkdirTemp("", "ghbranch-unpack-*")
+	tmpDir, err := os.MkdirTemp(storageRoot, "ghbranch-unpack-*")
 	if err != nil {
 		return fmt.Errorf("creating temp dir: %w", err)
 	}