diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9fa749a19..0ba082d0c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -194,6 +194,8 @@ jobs:
           commit_user_email: zen-browser-auto@users.noreply.github.com
 
   lint:
+    permissions:
+      contents: read
     uses: ./.github/workflows/code-linter.yml
     needs: [build-data]
     name: Lint