diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index de798f6..b930b5e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,6 +11,9 @@ on:
       - "README.md"
       - ".github/workflows/ci.yml"
 
+permissions:
+  contents: read
+
 env:
   # We use environment variables to specify the Rust version and other settings once
   RUST_TOOLCHAIN: 1.94.0