diff --git a/.github/workflows/fognav-msgs-docker.yaml b/.github/workflows/fognav-msgs-docker.yaml
index 1f24cce..f329470 100644
--- a/.github/workflows/fognav-msgs-docker.yaml
+++ b/.github/workflows/fognav-msgs-docker.yaml
@@ -4,6 +4,10 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build-and-push:
     runs-on: ubuntu-latest