diff --git a/.github/workflows/main-docker.yml b/.github/workflows/main-docker.yml
index d1f5a95e6..862661213 100644
--- a/.github/workflows/main-docker.yml
+++ b/.github/workflows/main-docker.yml
@@ -17,8 +17,11 @@ env:
   IMAGE_NAME: ${{ github.repository_owner }}/notes
   TEST_TAG: ${{ github.repository_owner }}/notes:test
 
-jobs:
+permissions:
+  contents: read
+  packages: write
 
+jobs:
   test_docker:
     name: Check Docker build
     runs-on: ubuntu-latest