diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4648aa1..5d367fb 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -57,6 +57,8 @@ jobs:
     
   test:
     name: Test
+    permissions:
+      contents: read
     needs: options
     runs-on: ${{ matrix.os }}
     continue-on-error: ${{ needs.options.outputs.mode == 'report' }}