diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 69e3ae233..9fa749a19 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -199,6 +199,8 @@ jobs:
     name: Lint
 
   check-release:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     needs: [build-data, lint]
     steps: