diff --git a/.github/workflows/validate-action-typings.yml b/.github/workflows/validate-action-typings.yml
index 1eb0f1c2d..b4ecd9773 100644
--- a/.github/workflows/validate-action-typings.yml
+++ b/.github/workflows/validate-action-typings.yml
@@ -9,6 +9,8 @@ on:
 
 jobs:
   validate-typings:
+    permissions:
+      contents: read
     runs-on: "ubuntu-latest"
     steps:
       - uses: actions/checkout@v4