diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 1504d5e..2566a0e 100755
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -6,8 +6,9 @@ on:
 jobs:
   docker:
     permissions:
-      contents: read # for actions/checkout to fetch code
-      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      contents: read
+      security-events: write
+      packages: write
     runs-on: ubuntu-latest
     steps:
     - name: Checkout