diff --git a/.github/workflows/verify-pr.yaml b/.github/workflows/verify-pr.yaml
index d727983d..f95e38fc 100644
--- a/.github/workflows/verify-pr.yaml
+++ b/.github/workflows/verify-pr.yaml
@@ -1,4 +1,6 @@
 name: Verify PR
+permissions:
+  contents: read
 
 on:
   pull_request: