diff --git a/.github/workflows/docker-login.yml b/.github/workflows/docker-login.yml
index 9099866..c04ef18 100644
--- a/.github/workflows/docker-login.yml
+++ b/.github/workflows/docker-login.yml
@@ -9,6 +9,8 @@ on:
         default: '["bmg","dg2"]'
         type: string
 
+permissions: read-all
+
 jobs:
   docker-login:
     runs-on: ${{ matrix.runner }}