diff --git a/.github/workflows/code_coverage.yml b/.github/workflows/code_coverage.yml
index a60fe94..30a00af 100644
--- a/.github/workflows/code_coverage.yml
+++ b/.github/workflows/code_coverage.yml
@@ -1,5 +1,7 @@
 name: Code Coverage
 on: push
+permissions:
+  contents: read
 
 env:
   CARGO_TERM_COLOR: always