diff --git a/.github/workflows/visual-regression.yml b/.github/workflows/visual-regression.yml
index 6884dfe8..4e76ef17 100644
--- a/.github/workflows/visual-regression.yml
+++ b/.github/workflows/visual-regression.yml
@@ -9,6 +9,10 @@ on:
       - main
   merge_group:
 
+permissions:
+  contents: read
+  actions: write
+
 env:
   VISUAL_REGRESSION_SNAPSHOT_DIRECTORY: "__image_snapshots__"