diff --git a/.gitea/workflows/docker.yml b/.gitea/workflows/docker.yml
index c0d931a..0a8b961 100644
--- a/.gitea/workflows/docker.yml
+++ b/.gitea/workflows/docker.yml
@@ -13,6 +13,9 @@ jobs:
   build:
     name: Build & push all images
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
       - name: Checkout