diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index ce9820e..583ab71 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -8,6 +8,8 @@ concurrency:
 #  cancel-in-progress: true
 
 name: Test
+permissions:
+  contents: read
 jobs:
   test:
     strategy: