diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 43d4bf5631..24d1849075 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -8,6 +8,10 @@ on:
     branches:
       - "**"
 
+permissions:
+  contents: read
+  packages: write
+
 env:
   DOCKER_BUILDKIT: 1
   MAIN_BRANCH: main
diff --git a/aries/agents/aath-backchannel/src/main.rs b/aries/agents/aath-backchannel/src/main.rs
index db22215bde..8a70c3f2ae 100644
--- a/aries/agents/aath-backchannel/src/main.rs
+++ b/aries/agents/aath-backchannel/src/main.rs
@@ -141,7 +141,7 @@ async fn main() -> std::io::Result<()> {
             .service(web::scope("/didcomm").route("", web::post().to(didcomm::receive_message)))
     })
     .keep_alive(std::time::Duration::from_secs(30))
-    .client_request_timeout(std::time::Duration::from_secs(32))
+    .client_request_timeout(std::time::Duration::from_secs(31))
     .workers(1)
     .bind(format!("{}:{}", host, opts.port))?
     .run()