diff --git a/.github/workflows/build-docker-artifact.yaml b/.github/workflows/build-docker-artifact.yaml
index 174879fbecaf..2fa0fb360094 100644
--- a/.github/workflows/build-docker-artifact.yaml
+++ b/.github/workflows/build-docker-artifact.yaml
@@ -17,6 +17,12 @@ on:
             - "ubuntu-20.04-amd64"
             - "ubuntu-22.04-amd64"
 
+permissions:
+  contents: read
+  packages: write
+  attestations: write
+  id-token: write
+
 jobs:
   build-docker-image:
     env: