diff --git a/.github/workflows/build-release-binary.yml b/.github/workflows/build-release-binary.yml
index 929eef3..d683c52 100644
--- a/.github/workflows/build-release-binary.yml
+++ b/.github/workflows/build-release-binary.yml
@@ -160,6 +160,9 @@ jobs:
     needs: build_binaries
     name: Build docker images
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
@@ -180,10 +183,12 @@ jobs:
           username:  ${{ github.repository }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Build and publish docker images
+      - name: Download release from github
         run: |
           gh release download ${{ github.event.release.tag_name }} -p '*Linux_x86_64*' -p '*aarch64*' -p '*armv7*'
 
+      - name: Unpack archives
+        run: |
           # We need to extract into sub folders to so that our dockerimage can fine the binaries.
           #
           # By providing `platform` to `docker buildx` the variable `TARGETPLATFORM` will be available
@@ -199,6 +204,8 @@ jobs:
           7z x maker_${{ github.event.release.tag_name }}_Linux_armv7.tar -olinux/arm/v7
           7z x taker_${{ github.event.release.tag_name }}_Linux_armv7.tar -olinux/arm/v7
 
+      - name: Build maker docker image
+        run: |
           docker buildx build \
               --push \
               --platform linux/amd64,linux/arm64,linux/arm/v7 \
@@ -207,6 +214,9 @@ jobs:
               --build-arg BINARY_PATH=maker \
               .
 
+
+      - name: Build taker docker image
+        run: |
           docker buildx build \
               --push \
               --platform linux/amd64,linux/arm64,linux/arm/v7 \
@@ -217,3 +227,4 @@ jobs:
 
 
 
+
diff --git a/.github/workflows/release-docker.yml b/.github/workflows/release-docker.yml
index 7a2ad82..9560cbb 100644
--- a/.github/workflows/release-docker.yml
+++ b/.github/workflows/release-docker.yml
@@ -12,6 +12,9 @@ jobs:
   build_docker_image:
     name: Build docker images
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps: