diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index ba842b2..808a973 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -9,6 +9,11 @@ on:
 jobs:
   build-custom-silverblue:
     uses: ./.github/workflows/reusable-build.yaml
+    permissions:
+      attestations: write
+      contents: read
+      id-token: write
+      packages: write
     with:
       containerfile_path: ./Containerfile
       registry: ghcr.io