diff --git a/.github/workflows/build_and_test.yml b/.github/workflows/build_and_test.yml
index 78bdc01b0ca57..46e3524b38ccd 100644
--- a/.github/workflows/build_and_test.yml
+++ b/.github/workflows/build_and_test.yml
@@ -276,6 +276,8 @@ jobs:
       fromJson(needs.precondition.outputs.required).sparkr == 'true') &&
       inputs.branch == 'master'
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
     steps:
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v2
diff --git a/.github/workflows/build_infra_images_cache.yml b/.github/workflows/build_infra_images_cache.yml
index 3d21b883e63ab..b568b84c5b3c9 100644
--- a/.github/workflows/build_infra_images_cache.yml
+++ b/.github/workflows/build_infra_images_cache.yml
@@ -34,6 +34,8 @@ jobs:
   main:
     if: github.repository == 'apache/spark'
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
     steps:
       - name: Checkout Spark repository
         uses: actions/checkout@v2