diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index f466185..3a701d5 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -16,9 +16,7 @@ on:
       - 'fmt-update.sh'
       - '.github/workflows/image.yaml'
 
-permissions:
-  contents: read
-  packages: write
+permissions: {}
 
 concurrency:
   group: image-${{ github.ref }}
@@ -27,6 +25,9 @@ concurrency:
 jobs:
   push:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1