diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index ec0e4139e..276e6377f 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -14,6 +14,9 @@
 
 name: Release to Docker
 
+permissions:
+  contents: read
+
 # Controls when the action will run.
 on:
   workflow_dispatch: