diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0ea8998b..94bd4610 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,6 +7,8 @@ jobs:
   push_to_registry:
     name: Push Docker image to GitHub Packages
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
     env:
       DOCKER_REPO: ghcr.io/spotify/flink-operator
     steps: