diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1535dcd..4362774 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,16 +14,8 @@ jobs:
     name: Push Docker image to Docker Hub
     runs-on: ubuntu-latest
     permissions:
-      contents: write
+      contents: read
       packages: write
-      deployments: write
-      statuses: write
-      actions: write
-      checks: write
-      issues: write
-      pull-requests: write
-      security-events: write
-    
     steps:
       - name: Check out the repo
         uses: actions/checkout@v1
@@ -54,5 +46,5 @@ jobs:
         with:
           context: .
           push: true
-          tags: ${{ env.sha_short }}
+          tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}