diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index 04f1a5c..817feeb 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -10,6 +10,9 @@ on:
   schedule:
     - cron:  '0 9 15 * *'
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test