diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 592841e..3d973ff 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -22,6 +22,10 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
+permissions:
+  contents: read
+  actions: read
+  packages: read
 jobs:
   
   lint:
@@ -520,6 +524,7 @@ jobs:
     permissions:
       contents: write
       id-token: write
+      actions: read
     needs:
       - lint
       - build-freebsd