diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 1f20e51a..4208787f 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -13,6 +13,8 @@ env:
 jobs:
   run-build:
     uses: ./.github/workflows/build.yaml
+    permissions:
+      contents: read
 
   build:
     name: Build