diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 2d93a54..dab27cb 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -23,6 +23,9 @@ jobs:
   docker:
     needs: test
     runs-on: ubuntu-latest
+    # GITEA_TOKEN is auto-provided per run; grant it permission to push to the registry.
+    permissions:
+      packages: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4