diff --git a/.github/workflows/image-ci.yml b/.github/workflows/image-ci.yml
index 514b87c..ea77c3a 100644
--- a/.github/workflows/image-ci.yml
+++ b/.github/workflows/image-ci.yml
@@ -7,6 +7,10 @@ on:
     tags:
       - "[0-9]*.[0-9]*.[0-9]*"
 
+permissions:
+  pull-requests: write
+  contents: write
+
 jobs:
   build-tag-push:
     runs-on: ubuntu-latest
@@ -70,9 +74,6 @@ jobs:
   update-tags:
     runs-on: ubuntu-latest
     needs: build-tag-push
-    permissions:
-      contents: write
-      pull-requests: write
 
     steps:
       - name: Checkout