diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml
index 7f89870..ca15b49 100644
--- a/.gitea/workflows/docker-build.yml
+++ b/.gitea/workflows/docker-build.yml
@@ -16,6 +16,9 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     
     steps:
       - name: Checkout code
diff --git a/.gitea/workflows/docker-cleanup.yml b/.gitea/workflows/docker-cleanup.yml
index 9e981f9..b1f8d68 100644
--- a/.gitea/workflows/docker-cleanup.yml
+++ b/.gitea/workflows/docker-cleanup.yml
@@ -9,6 +9,9 @@ on:
 jobs:
   cleanup-old-images:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master'
     
     steps: