diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 2f08eeb..94dc23a 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -10,6 +10,8 @@ on:
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   validate:
     # Don't run the cron job on forks.