diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index bf1aaa5..cd63b21 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -4,6 +4,10 @@ on:
   push:
     branches: [ main ]
 
+permissions:
+  packages: write
+  contents: read
+
 jobs:
   build-and-deploy:
     name: Build & Deploy