diff --git a/.github/workflows/build-ruby.yml b/.github/workflows/build-ruby.yml
index 520efe3..c4aae95 100644
--- a/.github/workflows/build-ruby.yml
+++ b/.github/workflows/build-ruby.yml
@@ -206,6 +206,8 @@ jobs:
             libc: centos
             arch: ["x86_64", "aarch64"]
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
     name: Build (${{ matrix.engine }} ${{ matrix.version }} ${{ matrix.libc }})
     steps:
       - name: Set up Docker
@@ -228,6 +230,8 @@ jobs:
           echo "DOCKER_PLATFORMS=$(echo ${{ join(matrix.arch) }} | tr ',' '\n' | sed 's/^/linux\//' | paste -s -d, -)" >> $GITHUB_OUTPUT
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       # First, build image for x86_64 as it will fail fast
       #