diff --git a/.github/workflows/python3.9.yaml b/.github/workflows/python3.9.yaml
index 8fa53ace..d7cb2dcf 100644
--- a/.github/workflows/python3.9.yaml
+++ b/.github/workflows/python3.9.yaml
@@ -27,6 +27,9 @@ on:
   schedule:
     - cron: '0 7 * * *'
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true