diff --git a/.github/workflows/build-publish-images.yml b/.github/workflows/build-publish-images.yml
index 7616b4af..7d883547 100644
--- a/.github/workflows/build-publish-images.yml
+++ b/.github/workflows/build-publish-images.yml
@@ -12,10 +12,7 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
-permissions:
-  contents: read
-  packages: write
-  actions: read
+permissions: read-all
 
 env:
   COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}