diff --git a/pkg/registry/client.go b/pkg/registry/client.go
index 8818f5763..92decc94e 100644
--- a/pkg/registry/client.go
+++ b/pkg/registry/client.go
@@ -773,6 +773,8 @@ func (c *Client) Push(data []byte, ref string, options ...PushOption) (*PushResu
 	repository.PlainHTTP = c.plainHTTP
 	repository.Client = c.authorizer
 
+	ctx = auth.AppendRepositoryScope(ctx, repository.Reference, auth.ActionPush, auth.ActionPull)
+
 	manifestDescriptor, err = oras.ExtendedCopy(ctx, memoryStore, parsedRef.String(), repository, parsedRef.String(), oras.DefaultExtendedCopyOptions)
 	if err != nil {
 		return nil, err