diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 72375fd..2d94b2d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,6 @@
 name: Sharpy CI
 run-name: ${{ github.actor }} CI for sharpy
+permissions: read-all
 on:
   push:
     branches: