diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 33824a1..b668c81 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,8 @@
 # - Running a final integration check
 
 name: CI
+permissions:
+  contents: read
 
 on:
   push: