diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 578377650b..f3770eb749 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -25,6 +25,8 @@ permissions:
 jobs:
   docker:
     name: Build, test, and publish Docker images to Docker Hub
+    permissions:
+      contents: write  # for docker to push to registry
     runs-on: ubuntu-latest
 
     steps: