diff --git a/.github/workflows/docker-keycloak.yml b/.github/workflows/docker-keycloak.yml
index 0fb8b3f..8105d21 100644
--- a/.github/workflows/docker-keycloak.yml
+++ b/.github/workflows/docker-keycloak.yml
@@ -9,6 +9,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  contents: read
   packages: write
 
 jobs:
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 4fe69bb..9c10c4a 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -24,6 +24,7 @@ env:
   IMAGE_NAME: ${{ github.repository }}
 
 permissions:
+  contents: read
   packages: write
 
 jobs: