diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0013e46..1ad1e5f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,6 +14,11 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  id-token: write
+  contents: read
+  packages: write
+
 jobs:
   build:
     name: "Build Images"
@@ -27,11 +32,6 @@ jobs:
             platform: linux/arm64
     runs-on: ${{ matrix.runner.selector }}
 
-    permissions:
-      id-token: write
-      contents: read
-      packages: write
-
     steps:
       - name: Check out code
         uses: actions/checkout@v4
@@ -93,11 +93,6 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
 
-    permissions:
-      id-token: write
-      contents: read
-      packages: write
-
     steps:
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3