diff --git a/.github/workflows/build_container.yaml b/.github/workflows/build_container.yaml
index c6620d9685..1a98778604 100644
--- a/.github/workflows/build_container.yaml
+++ b/.github/workflows/build_container.yaml
@@ -112,6 +112,7 @@ jobs:
       GIT_SHA: ${{ needs.prepare_ci_run.outputs.GIT_SHA }}
     permissions:
       packages: write # Needed for pushing images to the registry
+      contents: read # Needed for checking out the repository
     steps:
       - name: Check out code
         uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3