diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index fbb381e..132e92e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,6 +9,9 @@ on:
 jobs:
   build-all:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: read
     container:
       image: ghcr.io/i-a-s/iabuild-env:latest
     strategy: