diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c9d14b8986..26f4b489a4 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -136,6 +136,10 @@ jobs:
   build-docker:
     name: Build Docker
     runs-on: ubuntu-latest
+    permissions:
+      contents: 'write'
+      id-token: 'write'
+      packages: 'write'
     needs:
       - build-server
       - build-core