diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml
index 6c73172..ff99fc0 100644
--- a/.gitea/workflows/docker-build.yml
+++ b/.gitea/workflows/docker-build.yml
@@ -4,6 +4,10 @@ on:
   push:
     branches:
       - "main"
+permissions:
+  packages: write
+  contents: read
+
 jobs:
   builder:
     name: 🏗️ Docker builder (latest from master) 🏗️
diff --git a/.gitea/workflows/docker-tag.yml b/.gitea/workflows/docker-tag.yml
index 01ce883..402e15a 100644
--- a/.gitea/workflows/docker-tag.yml
+++ b/.gitea/workflows/docker-tag.yml
@@ -4,6 +4,10 @@ on:
   push:
     tags:
       - "v*"
+permissions:
+  packages: write
+  contents: read
+
 jobs:
   builder:
     name: 🏗️ Docker builder release tag 🏗️