diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f84debd..3529899 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -85,6 +85,7 @@ jobs:
     needs: release-helm-chart
     if: needs.release-helm-chart.outputs.version-check == 'false'
     permissions:
+      contents: read
       packages: write
     runs-on: ubuntu-latest
     strategy:
@@ -121,12 +122,12 @@ jobs:
            # Automatically prepare image tags; See action docs for more examples. 
            # semver patter will generate tags like these for example :1 :1.2 :1.2.3
           tags: |
-             type=ref,event=branch
-             type=ref,event=pr
-             type=raw,value=latest
-             type=semver,pattern={{version}},value=${{ needs.release-helm-chart.outputs.app-version }}
-             type=semver,pattern={{major}},value=${{ needs.release-helm-chart.outputs.app-version }}
-             type=semver,pattern={{major}}.{{minor}},value=${{ needs.release-helm-chart.outputs.app-version }}
+            type=ref,event=branch
+            type=ref,event=pr
+            type=raw,value=latest
+            type=semver,pattern={{version}},value=${{ needs.release-helm-chart.outputs.app-version }}
+            type=semver,pattern={{major}},value=${{ needs.release-helm-chart.outputs.app-version }}
+            type=semver,pattern={{major}}.{{minor}},value=${{ needs.release-helm-chart.outputs.app-version }}
 
       - name: Build and push Docker images
         uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0