diff --git a/.github/workflows/webhooks.yml b/.github/workflows/webhooks.yml
index bf0cd086d..c89d0d056 100644
--- a/.github/workflows/webhooks.yml
+++ b/.github/workflows/webhooks.yml
@@ -66,6 +66,9 @@ jobs:
 
   image-build:
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      packages: write
     strategy:
       matrix:
         module: [ admission ]