diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml
index 660bbb46..deb910e8 100644
--- a/.github/workflows/devcontainer.yml
+++ b/.github/workflows/devcontainer.yml
@@ -5,7 +5,6 @@ concurrency:
 jobs:
   dev-container-publish:
     permissions:
-      contents: read
       packages: write
     runs-on: ubuntu-22.04
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ce2f8934..f2cacea9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -53,7 +53,6 @@ jobs:
   container-publish:
     needs: release-publish
     permissions:
-      contents: read
       packages: write
     runs-on: ubuntu-22.04
     steps:
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja
index 05684b02..3b576d57 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/devcontainer.yml.jinja	
@@ -6,7 +6,6 @@ concurrency:
 jobs:
   dev-container-publish:
     permissions:
-      contents: read
       packages: write
     runs-on: ubuntu-22.04
     steps:
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja
index 909b222f..75fb63dc 100644
--- a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja	
+++ b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/release.yml.jinja	
@@ -54,7 +54,6 @@ jobs:
   container-publish:
     needs: release-publish
     permissions:
-      contents: read
       packages: write
     runs-on: ubuntu-22.04
     steps: