diff --git a/.forgejo/workflows/import.yaml b/.forgejo/workflows/import.yaml
index 2fb62cf..1dcd07e 100644
--- a/.forgejo/workflows/import.yaml
+++ b/.forgejo/workflows/import.yaml
@@ -1,6 +1,4 @@
 name: build-container-image
-permissions:
-  packages: write
 
 on:
   push:
@@ -10,6 +8,9 @@ on:
 jobs:
   docker:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Install dependencies
         run: |