diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5cd1220..7bef692 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,6 +22,8 @@ jobs:
 
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     needs:
       - build