diff --git a/dbuild/templates/github-workflow.yaml b/dbuild/templates/github-workflow.yaml
index 6c657fb..9807f5c 100644
--- a/dbuild/templates/github-workflow.yaml
+++ b/dbuild/templates/github-workflow.yaml
@@ -8,6 +8,12 @@ on:
     branches: [main]
   workflow_dispatch:
 
+permissions:
+  contents: write
+  packages: write
+  id-token: write
+  actions: read
+
 jobs:
   build:
     uses: daemonless/dbuild/.github/workflows/daemonless-build.yaml@main