diff --git a/.github/workflows/docker-build-test.yml b/.github/workflows/docker-build-test.yml
index 4c8af3e..11feb28 100644
--- a/.github/workflows/docker-build-test.yml
+++ b/.github/workflows/docker-build-test.yml
@@ -14,7 +14,8 @@ on:
       - main
 
 permissions:
-  # write-all
+  # write-all is too much
+  # see https://github.com/orgs/community/discussions/57724 for more info
   contents: read
   packages: write
   attestations: write