diff --git a/.github/workflows/iso.yml b/.github/workflows/iso.yml
index 95ad214..c27993b 100644
--- a/.github/workflows/iso.yml
+++ b/.github/workflows/iso.yml
@@ -2,6 +2,9 @@
 on:
   push: {}
   workflow_dispatch: {}
+permissions:
+  contents: read
+  packages: write
 jobs:
   iso:
     uses: ublue-os/isogenerator/.github/workflows/iso.yml@main