diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml
index d3cdd91..2d0e193 100644
--- a/.github/workflows/yamllint.yml
+++ b/.github/workflows/yamllint.yml
@@ -1,5 +1,7 @@
 ---
 name: file-consistency
+permissions:
+  contents: read
 on:  # yamllint disable-line rule:truthy
   pull_request:
     branches: