diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index b42d13f..9ac2756 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -1,23 +1,36 @@
 name: Publish Docker Image
+permissions:
+  actions: read
+  checks: read
+  contents: read
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: read
+  statuses: read
 
 on:
   pull_request:
   push:
     branches:
-      - "main"
+      - main
 
 env:
   REGISTRY_IMAGE: registry.dangerous.tech/dangeroustech/zerotierbridge
 
 jobs:
   Docker_Build:
-    name: "Docker Build And Release"
+    name: Docker Build And Release
     runs-on: ubuntu-latest
     strategy:
       fail-fast: true
       matrix:
-        arch: ["amd64", "arm64"]
-        version: ["1.12.2"]
+        arch: [amd64, arm64]
+        version: [1.12.2]
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v4
@@ -64,7 +77,7 @@ jobs:
           retention-days: 1
 
   MergeRefs:
-    name: "Do The Horrible Merge Thing"
+    name: Do The Horrible Merge Thing
     runs-on: ubuntu-latest
     needs:
       - Docker_Build
@@ -137,9 +150,9 @@ jobs:
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           git-message: "chore 🤖: Release {version}"
-          output-file: "CHANGELOG.md"
-          tag-prefix: "v"
-          fallback-version: "1.0.0"
+          output-file: CHANGELOG.md
+          tag-prefix: v
+          fallback-version: 1.0.0
           release-count: 0 # preserve all versions in changelog
           skip-on-empty: false # otherwise we don't publish fixes