diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fe62bdb..f94e357 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -82,6 +82,8 @@ jobs:
     if: ${{ github.event_name != 'pull_request' }}
     needs: build
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
     defaults:
       run:
         shell: bash
@@ -103,11 +105,11 @@ jobs:
           labels: ${{ env.CONTAINER_LABELS }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.CR_PAT }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Publish Cruise Control container image
         uses: docker/build-push-action@v4