diff --git a/.github/workflows/release-service-image.yml b/.github/workflows/release-service-image.yml
index 9bc0732c..3d535b20 100644
--- a/.github/workflows/release-service-image.yml
+++ b/.github/workflows/release-service-image.yml
@@ -12,6 +12,9 @@ env:
 jobs:
   build_and_start_svc:
     uses: ./.github/workflows/build-and-start-svc.yml
+    permissions:
+      contents: read
+      id-token: write
   docker-image:
     needs: build_and_start_svc
     environment: