diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 013b7ae..0686baa 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -11,6 +11,9 @@ on:
 env:
   GOLANGCI_LINT_VERSION: v2.0.2
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test