diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 6ea2c38..8a72706 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -9,6 +9,9 @@ on:
   schedule:
     - cron: "0 8 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: "Build"