diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 72bbfb7..532ed0b 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -16,6 +16,9 @@ on:
     branches: [ "main" ]
   workflow_dispatch:
 
+permissions:
+  packages: write
+
 env:
   # Use docker.io for Docker Hub if empty
   REGISTRY: ghcr.io