diff --git a/.github/workflows/images.yml b/.github/workflows/images.yml
index 4166e32..818c850 100644
--- a/.github/workflows/images.yml
+++ b/.github/workflows/images.yml
@@ -90,6 +90,8 @@ jobs:
   
   images:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     needs: build-and-push-image
     env:
       OUTPUTS_DIR: /tmp/outputs