diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4bf9058..5937469 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,6 +7,10 @@ jobs:
   build:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      packages: write
+
     steps:
       - name: 📥 Checkout Repository
         uses: actions/checkout@v4
@@ -41,11 +45,9 @@ jobs:
           cd android
           chmod +x ./gradlew
           ./gradlew clean assembleRelease
-
       - name: 🔑 Decode Keystore
         run: |
           echo "${{ secrets.KEYSTORE_FILE }}" | base64 -d > android/app/release-key.jks
-
       - name: 🔏 Sign APK
         run: |
           $ANDROID_HOME/build-tools/34.0.0/apksigner sign \
@@ -55,7 +57,6 @@ jobs:
             --key-pass pass:${{ secrets.KEY_PASSWORD }} \
             --out android/app/build/outputs/apk/release/app-release-signed.apk \
             android/app/build/outputs/apk/release/app-release-unsigned.apk
-
       - name: ☁️ Upload Signed APK
         uses: actions/upload-artifact@v4
         with: