diff --git a/.github/workflows/build-publish-images.yml b/.github/workflows/build-publish-images.yml
index 6acf4102..f1147ac1 100644
--- a/.github/workflows/build-publish-images.yml
+++ b/.github/workflows/build-publish-images.yml
@@ -15,6 +15,7 @@ concurrency:
 permissions:
   contents: read
   packages: write
+  actions: read
 
 env:
   COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}