diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 80b4a5d..785b2f1 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -8,6 +8,9 @@ on:
       - '**.yml'
       - .yamllint
 
+permissions:
+  contents: 'read'
+
 jobs:
   yamllint:
     runs-on: ubuntu-latest