diff --git a/.github/workflows/build_stable.yml b/.github/workflows/build_stable.yml
index 15438f00..c00f89f6 100644
--- a/.github/workflows/build_stable.yml
+++ b/.github/workflows/build_stable.yml
@@ -7,6 +7,6 @@ jobs:
   delegate:
     uses: ./.github/workflows/core-build-stable.yml
     permissions:
-      contents: read
+      contents: write
       packages: write
     secrets: inherit
diff --git a/.github/workflows/core-build-stable.yml b/.github/workflows/core-build-stable.yml
index e6cdb951..e5fe663b 100644
--- a/.github/workflows/core-build-stable.yml
+++ b/.github/workflows/core-build-stable.yml
@@ -89,6 +89,8 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository == 'frappe/frappe_docker' && github.event_name != 'pull_request' }}
     needs: v16_publish
+    permissions:
+      contents: write
 
     steps:
       - name: Checkout