diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index ca63a0a8..e629a50e 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -97,6 +97,12 @@ jobs:
             name: Production
         needs:
             - build
+
+        permissions:
+            contents: read
+            packages: write
+            id-token: write
+
         steps:
             - name: Prepare
               run: |