diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index c1ead9a..9466d88 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -12,6 +12,7 @@ env:
   IMAGE_NAME: ghcr.io/${{ github.repository }}
 
 permissions:
+  contents: read
   packages: write
 
 jobs: