diff --git a/.github/workflows/grade-assignment.yml b/.github/workflows/grade-assignment.yml
index d06dc2d..3fd4b9c 100644
--- a/.github/workflows/grade-assignment.yml
+++ b/.github/workflows/grade-assignment.yml
@@ -8,6 +8,7 @@ on:
 jobs:
   grade:
     permissions:
+      contents: read
       issues: write
       pull-requests: write
     uses: HackYourFuture/github-actions/.github/workflows/auto-grade.yml@main