diff --git a/.github/workflows/_test_release.yml b/.github/workflows/_test_release.yml
index ea0c352aa..2a2324c6f 100644
--- a/.github/workflows/_test_release.yml
+++ b/.github/workflows/_test_release.yml
@@ -11,6 +11,9 @@ on:
 env:
   PYTHON_VERSION: "3.10"
 
+permissions:
+  contents: read
+
 jobs:
   build:
     if: github.ref == 'refs/heads/main'