diff --git a/.github/workflows/delete-old-packages.yml b/.github/workflows/delete-old-packages.yml
index 17de37151..bdf79370d 100644
--- a/.github/workflows/delete-old-packages.yml
+++ b/.github/workflows/delete-old-packages.yml
@@ -5,6 +5,8 @@ on:
     - cron: "0 0 * * *"
   workflow_dispatch:
 
+permissions: {}
+
 defaults:
   run:
     shell: bash
@@ -13,6 +15,9 @@ jobs:
   delete:
     name: Cleanup Android SDK
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Delete packages
         uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5.0.0