diff --git a/.github/workflows/build_on_push.yaml b/.github/workflows/build_on_push.yaml
index 38b9a59..f1ff874 100644
--- a/.github/workflows/build_on_push.yaml
+++ b/.github/workflows/build_on_push.yaml
@@ -26,6 +26,8 @@ jobs:
   build:
     name: Build Artifacts
     needs: quality-checks
+    permissions:
+      contents: read
     uses: ./.github/workflows/build.yaml
     with:
       semver: '0.0.0-run.${{ github.run_number }}'