diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index f304cefa6..14726665d 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -8,8 +8,10 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
-    permissions: # TODO remove when public
+    permissions: 
+       contents: read # TODO remove when public
        packages: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4