diff --git a/.github/workflows/d-publish-image.yaml b/.github/workflows/d-publish-image.yaml
index e1541973..00e818b7 100644
--- a/.github/workflows/d-publish-image.yaml
+++ b/.github/workflows/d-publish-image.yaml
@@ -1,8 +1,18 @@
 name: d-publish-image
 permissions:
+  actions: read
+  checks: read
   contents: read
-  metadata: read
+  deployments: read
+  discussions: read
   id-token: write
+  issues: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  statuses: read
+  security-events: read
 on:
   workflow_call:
     inputs: