diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index eed0369..bd7b348 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,3 +14,10 @@ updates:
       day: sunday
     open-pull-requests-limit: 3
     rebase-strategy: disabled
+  - package-ecosystem: docker
+    directory: build/
+    schedule:
+      interval: monthly
+      day: sunday
+    open-pull-requests-limit: 3
+    rebase-strategy: disabled
diff --git a/.github/workflows/build-verify.yml b/.github/workflows/build-verify.yml
index 95f903d..aa11852 100644
--- a/.github/workflows/build-verify.yml
+++ b/.github/workflows/build-verify.yml
@@ -14,12 +14,13 @@ on:
       - '*.md'
 permissions: 
   contents: read
-  id-token: write # needed for signing the images with GitHub OIDC Token
 
 jobs:
   build-verify-package:
     runs-on: ubuntu-latest
     environment: Build
+    permissions: 
+      id-token: write # needed for signing the images with GitHub OIDC Token
     steps:
       - name: Get current date
         id: date