diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ec876a2..1a3984c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,4 +1,5 @@
 name: CI
+
 on:
   push:
     branches:
@@ -9,6 +10,10 @@ on:
   schedule:
     - cron: 0 3 1 * *
   workflow_dispatch:
+
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test