diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 9d99e341..2b882b9c 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -12,6 +12,9 @@ jobs:
   build-and-push:
     name: Build and Push
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: write
     # Always run against a tag, even if the commit into the tag has [docker skip] within the commit message.
     if: "!contains(github.ref, 'main') || (!contains(github.event.head_commit.message, 'skip docker') && !contains(github.event.head_commit.message, 'docker skip'))"
     steps: