diff --git a/.github/workflows/build_base.yaml b/.github/workflows/build_base.yaml
index f5d7773fae..8fa4de8bde 100644
--- a/.github/workflows/build_base.yaml
+++ b/.github/workflows/build_base.yaml
@@ -9,7 +9,7 @@ on:
         value: ${{ jobs.d.outputs.p }}
 
 permissions:
-  packages: write
+  packages: read
   contents: read
 
 defaults: