diff --git a/.gitea/workflows/docker-build.yaml b/.gitea/workflows/docker-build.yaml
index 46489fd..0129390 100644
--- a/.gitea/workflows/docker-build.yaml
+++ b/.gitea/workflows/docker-build.yaml
@@ -22,6 +22,7 @@ jobs:
   build-apache-amd64:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       packages: write
     container:
       image: catthehacker/ubuntu:act-latest
@@ -45,6 +46,7 @@ jobs:
   build-apache-arm64:
     runs-on: ubuntu-latest-arm
     permissions:
+      contents: read
       packages: write
     container:
       image: catthehacker/ubuntu:act-latest
@@ -69,6 +71,7 @@ jobs:
     needs: [build-apache-amd64, build-apache-arm64]
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       packages: write
     container:
       image: catthehacker/ubuntu:act-latest