diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f752185..e0fb3f6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -15,6 +15,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       version: ${{ steps.pack.outputs.version }}