diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 3265f41..dd7bbff 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   unittest:
     runs-on: ubuntu-latest
@@ -62,4 +65,4 @@ jobs:
         run: |
           pip install coverage
           coverage run -m unittest tests/*.py
-          coverage report -m --fail-under=60
\ No newline at end of file
+          coverage report -m --fail-under=60