diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ee7f8fc1..a3088ca1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -9,7 +9,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write      
+  contents: read,write      
 
 jobs:
   build: