diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 8a752b78dfc..fde73941f1b 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -30,6 +30,8 @@ on:
       token:
         description: 'Token to use for authentication with GitHub'
         required: true
+permissions:
+  contents: read
 jobs:
   verify:
     name: Verify