diff --git a/.github/workflows/build-push-deploy-promrated.yml b/.github/workflows/build-push-deploy-promrated.yml
index dacbedc69..211ed7766 100644
--- a/.github/workflows/build-push-deploy-promrated.yml
+++ b/.github/workflows/build-push-deploy-promrated.yml
@@ -9,6 +9,9 @@ on:
 
 jobs:
   build-docker:
+    permissions:
+      contents: read
+      packages: write
     runs-on: ubuntu-latest
     name: Build Docker Image
     steps:
diff --git a/.github/workflows/build-push-deploy.yml b/.github/workflows/build-push-deploy.yml
index 5887269a1..5a086a4d9 100644
--- a/.github/workflows/build-push-deploy.yml
+++ b/.github/workflows/build-push-deploy.yml
@@ -9,6 +9,9 @@ on:
 name: Build and Publish Docker Image
 jobs:
   build-docker:
+    permissions:
+      contents: read
+      packages: write
     runs-on: charon-ci
     name: Build Docker Image
     steps: