diff --git a/.gitea/workflows/publish.yml b/.gitea/workflows/publish.yml
index 08691dd..a80bbb6 100644
--- a/.gitea/workflows/publish.yml
+++ b/.gitea/workflows/publish.yml
@@ -6,6 +6,9 @@ on:
       - "8.0"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -14,7 +17,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.REGISTRY_PASSWORD }}
+          token: ${{ secrets.GITEA_TOKEN }}
           ref: "8.0"
           fetch-depth: 0