diff --git a/.github/workflows/image_app.yml b/.github/workflows/image_app.yml
index d32ea5b5..1238e73d 100644
--- a/.github/workflows/image_app.yml
+++ b/.github/workflows/image_app.yml
@@ -30,6 +30,9 @@ jobs:
   build-app:
     name: Build and Publish Application Image
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -58,7 +61,7 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ secrets.GHCR_ACCESS_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push
         uses: docker/build-push-action@v6
diff --git a/.github/workflows/image_base.yml b/.github/workflows/image_base.yml
index faa6e798..2dfeeb4a 100644
--- a/.github/workflows/image_base.yml
+++ b/.github/workflows/image_base.yml
@@ -30,6 +30,9 @@ jobs:
     name: Build and Publish Base Image
     runs-on: ubuntu-latest
     needs: [ build-client ]
+    permissions:
+      packages: write
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -64,7 +67,7 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ secrets.GHCR_ACCESS_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate base Dockerfile
         env: