diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d26d9ed1e..fdbc5746e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -72,6 +72,8 @@ jobs:
         run: ./build.sh publishcontainers
         
   build-link-index-lambda:
+    permissions: 
+      contents: read
     needs: 
       - release-drafter
     uses: ./.github/workflows/build-link-index-updater-lambda.yml