diff --git a/.github/workflows/reuse-compliance.yml b/.github/workflows/reuse-compliance.yml
index 09410515..e7a8d4e7 100644
--- a/.github/workflows/reuse-compliance.yml
+++ b/.github/workflows/reuse-compliance.yml
@@ -8,6 +8,8 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
 jobs:
   compliance-check:
     name: Compliance Check