diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index da849743f7..d522945ee9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -56,6 +56,9 @@ defaults:
 env:
   JAVA_VERSION: 25
 
+permissions:
+  contents: read
+
 
 jobs: