diff --git a/.github/workflows/mirror-postgrest.yml b/.github/workflows/mirror-postgrest.yml
index 5c04660ad..374554906 100644
--- a/.github/workflows/mirror-postgrest.yml
+++ b/.github/workflows/mirror-postgrest.yml
@@ -24,6 +24,10 @@ jobs:
   mirror:
     needs:
       - version
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     uses: supabase/cli/.github/workflows/mirror-image.yml@main
     with:
       image: postgrest/postgrest:v${{ needs.version.outputs.postgrest_release }}