diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 76cde00..1d7d3b3 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -10,6 +10,9 @@ on:
     branches:
     - main
 
+permissions:
+  contents: read
+
 defaults:
   run:
     shell: bash