diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 52b21f8c67..721858f8ee 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -8,7 +8,9 @@ jobs:
   build-image:
     name: Build and Push image
     runs-on: ubuntu-22.04
-    permissions: write-all
+    permissions:
+      contents: read
+      packages: write
     outputs:
       # You'll need this output later to render the Compose file.
       tags: ${{ steps.meta.outputs.tags }}