diff --git a/.github/workflows/trigger-overcloud-host-image-build.yml b/.github/workflows/trigger-overcloud-host-image-build.yml
index d4dc43ce2..f99d630f0 100644
--- a/.github/workflows/trigger-overcloud-host-image-build.yml
+++ b/.github/workflows/trigger-overcloud-host-image-build.yml
@@ -27,6 +27,9 @@ jobs:
     name: Trigger overcloud host image build
     needs:
       - check-changes
+    permissions:
+      actions: write
+      contents: read
     if: ${{ needs.check-changes.outputs.pulp-repo-versions == 'true' }}
     steps:
       - name: Trigger overcloud host image build