diff --git a/.github/workflows/publish_container.yaml b/.github/workflows/publish_container.yaml
index fe569f3a0..fc9743cae 100644
--- a/.github/workflows/publish_container.yaml
+++ b/.github/workflows/publish_container.yaml
@@ -53,6 +53,9 @@ jobs:
     name: 🐋 Publish Container
     needs: determine_values
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
       - name: 🚩 Checkout Repo
diff --git a/.github/workflows/publish_gradle_project.yaml b/.github/workflows/publish_gradle_project.yaml
index 5786b49d7..cbae9014e 100644
--- a/.github/workflows/publish_gradle_project.yaml
+++ b/.github/workflows/publish_gradle_project.yaml
@@ -55,7 +55,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: determine_values
     permissions:
-      contents: write
+      contents: read
+      packages: write
 
     steps:
       - name: 🚩 Checkout Repo