diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index b6037be..a7c7270 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -5,6 +5,10 @@ on:
     tags:
       - 'v*' 
 
+permissions:
+  contents: read
+  actions: read
+
 jobs:
   trigger-internal-build:
     uses: infras/workflow-templates/.gitea/workflows/docker-template.yml@main