diff --git a/.github/workflows/build-package.yml.template b/.github/workflows/build-package.yml.template
index e1a64cfc8d..0d3fb4400f 100644
--- a/.github/workflows/build-package.yml.template
+++ b/.github/workflows/build-package.yml.template
@@ -13,6 +13,7 @@ jobs:
   build-popular-package:
     name: Build
     runs-on: $BUILD_OS
+    permissions: {}
     defaults:
       run:
         shell: bash