diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1c8eba4..12d6f26 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -8,6 +8,9 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
     - name: Checkout code
       uses: actions/checkout@v2
diff --git a/README.md b/README.md
index 7359a80..26dd7c0 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 # Deploy
 
+[![Docker](https://github.com/gvkhna/postgis-vector/actions/workflows/publish.yml/badge.svg?branch=main)](https://github.com/gvkhna/postgis-vector/actions/workflows/publish.yml)
+
 ```
 ghcr.io/gvkhna/postgis-vector:latest
 ```