diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index a6e1de49..c8b0c6fa 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -3,7 +3,7 @@ on:
   push:
     branches:
       - main
-permissions: none
+permissions: read
 
 jobs:
   release-please: