diff --git a/.github/workflows/docker_main.yml b/.github/workflows/docker_main.yml
index 9986ea9..2a5d9c7 100644
--- a/.github/workflows/docker_main.yml
+++ b/.github/workflows/docker_main.yml
@@ -8,6 +8,9 @@ on:
 jobs:
   docker:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v4
 
@@ -37,4 +40,4 @@ jobs:
       - name: Push head tag
         run: |
           echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u $GITHUB_ACTOR --password-stdin
-          docker push ghcr.io/hyperledger/firefly-ethconnect:head
\ No newline at end of file
+          docker push ghcr.io/hyperledger/firefly-ethconnect:head
diff --git a/.github/workflows/docker_release.yml b/.github/workflows/docker_release.yml
index ec8f935..831c17c 100644
--- a/.github/workflows/docker_release.yml
+++ b/.github/workflows/docker_release.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   docker:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v4
         with: