diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index c9d9205..84278e1 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -5,11 +5,6 @@ on:
     branches:
       - main
 
-# 写入/读取 package 权限，用于推送到 GHCR (ghcr.io)
-permissions:
-  contents: read
-  packages: write
-
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index b9ff148..f393f0a 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -1,8 +1,5 @@
 name: Upstream Sync
 
-permissions:
-  contents: write
-
 on:
   schedule:
     - cron: "0 */6 * * *" # run every 6 hours
@@ -41,4 +38,4 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.repository }}
           retain_days: 0
-          keep_minimum_runs: 2
\ No newline at end of file
+          keep_minimum_runs: 2