diff --git a/.github/workflows/build-docker-images.yml b/.github/workflows/build-docker-images.yml
index 5a902c9..ee771cd 100644
--- a/.github/workflows/build-docker-images.yml
+++ b/.github/workflows/build-docker-images.yml
@@ -1,3 +1,17 @@
+# Copyright 2026 Tensor Auto Inc. All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: Build and Push Docker Image
 
 on:
@@ -5,7 +19,8 @@ on:
   schedule:
     - cron: "0 1 * * *"
 
-permissions: {}
+permissions:
+  contents: read
 
 env:
   PYTHON_VERSION: "3.10"