diff --git a/.github/workflows/containers.yml b/.github/workflows/containers.yml
index bdd1180872..1aee8de91c 100644
--- a/.github/workflows/containers.yml
+++ b/.github/workflows/containers.yml
@@ -16,6 +16,9 @@ env:
 jobs:
   container:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      packages: write
     strategy:
       matrix:
         distro: [ fedora, ubuntu ]