diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml
index b94118c..3b2d918 100644
--- a/.github/workflows/build-and-test.yaml
+++ b/.github/workflows/build-and-test.yaml
@@ -14,6 +14,8 @@ jobs:
     strategy:
       matrix:
         otp: ["25", "26", "27"]
+    permissions:
+      contents: read
 
     steps:
     # Setup