diff --git a/.github/workflows/DockerBuild.AzureFunctionsBaseImage.yaml b/.github/workflows/DockerBuild.AzureFunctionsBaseImage.yaml
index 81bcc73c7..07befdd8d 100644
--- a/.github/workflows/DockerBuild.AzureFunctionsBaseImage.yaml
+++ b/.github/workflows/DockerBuild.AzureFunctionsBaseImage.yaml
@@ -1,5 +1,9 @@
 name: DockerBuild.AzureFunctionsImage
 
+permissions:
+  contents: read
+  packages: write
+
 on:
   # allow it to be run on-demand
   workflow_dispatch:
diff --git a/.github/workflows/DockerBuild.LambdaBaseImage.yaml b/.github/workflows/DockerBuild.LambdaBaseImage.yaml
index dd603c35b..dea1e9fb0 100644
--- a/.github/workflows/DockerBuild.LambdaBaseImage.yaml
+++ b/.github/workflows/DockerBuild.LambdaBaseImage.yaml
@@ -1,5 +1,9 @@
 name: DockerBuild.LambdaImage
 
+permissions:
+  contents: read
+  packages: write
+
 on:
   # allow it to be run on-demand
   workflow_dispatch:
diff --git a/.github/workflows/DockerBuild.NotebookImage.yaml b/.github/workflows/DockerBuild.NotebookImage.yaml
index d4c7c58e2..6679d99ae 100644
--- a/.github/workflows/DockerBuild.NotebookImage.yaml
+++ b/.github/workflows/DockerBuild.NotebookImage.yaml
@@ -1,5 +1,9 @@
 name: DockerBuild.NotebookImage
 
+permissions:
+  contents: read
+  packages: write
+
 on:
   # allow it to be run on-demand
   workflow_dispatch: