diff --git a/.github/workflows/ci-build-image.yml b/.github/workflows/ci-build-image.yml
index b1c2864a03..a512b5a296 100644
--- a/.github/workflows/ci-build-image.yml
+++ b/.github/workflows/ci-build-image.yml
@@ -38,6 +38,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
+      packages: read
     needs: [get-pom-properties]
     steps:
     - name: Install qemu
diff --git a/.github/workflows/pr-ci.yml b/.github/workflows/pr-ci.yml
index b4440c5ba0..7575991128 100644
--- a/.github/workflows/pr-ci.yml
+++ b/.github/workflows/pr-ci.yml
@@ -103,6 +103,7 @@ jobs:
         arch: [amd64, arm64]
     permissions:
       pull-requests: write
+      packages: read
     uses: ./.github/workflows/ci-build-image.yml
     with:
       build-arch: ${{ matrix.arch }}
diff --git a/.github/workflows/push-ci.yml b/.github/workflows/push-ci.yml
index 8a67cb95c0..c364372e96 100644
--- a/.github/workflows/push-ci.yml
+++ b/.github/workflows/push-ci.yml
@@ -28,6 +28,7 @@ jobs:
         arch: [amd64, arm64]
     permissions:
       pull-requests: write
+      packages: read
     with:
       build-arch: ${{ matrix.arch }}