diff --git a/.github/workflows/audit_dependencies.yml b/.github/workflows/audit_dependencies.yml
index 9d5234603..799015719 100644
--- a/.github/workflows/audit_dependencies.yml
+++ b/.github/workflows/audit_dependencies.yml
@@ -11,6 +11,9 @@ on:
   merge_group:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 defaults:
   run:
     shell: bash