diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c9c2d5a6..3a1c375d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -65,8 +65,9 @@ jobs:
   build:
     name: Build docker image
     runs-on: ubuntu-latest
-    needs: [test]
+    needs: [ test ]
     permissions:
+      contents: read
       packages: write
     steps:
       - name: Check out the repo