diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 68cc54b..46d92ca 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,6 +10,8 @@ on:
   release:
     types: [ created ]
 
+permissions: read-all
+
 jobs:
   build:
     name: Build Binaries