diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 15012b969f..3d272ac704 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -137,6 +137,9 @@ jobs:
   build-docker:
     name: Build Docker
     runs-on: ubuntu-latest
+    permissions:
+      contents: 'write'
+      id-token: 'write'
     needs:
       - build-server
       - build-core