diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 772c8a3..72ae746 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -15,6 +15,8 @@ on:
   release:
     types: [published, edited]
   workflow_dispatch:
+
+permissions: read-all
   
 env:
   REGISTRY: ghcr.io