diff --git a/.github/workflows/PublishNuget.yaml b/.github/workflows/PublishNuget.yaml
index 6df368226b..2226de4742 100644
--- a/.github/workflows/PublishNuget.yaml
+++ b/.github/workflows/PublishNuget.yaml
@@ -6,9 +6,7 @@ on:
     types: [completed]
     branches: ['main']
 
-permissions:
-  contents: write
-  packages: write
+permissions: read-all
 
 defaults:
   run: