diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a8ec6a474..0ba082d0c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,8 +1,5 @@
 name: Zen Release builds
 
-permissions:
-  contents: read
-
 on:
   workflow_dispatch:
     inputs:
@@ -80,9 +77,6 @@ jobs:
           echo "bid=${bdat}" >> $GITHUB_OUTPUT
 
   start-self-host:
-    permissions:
-      contents: read
-      secrets: read
     runs-on: ubuntu-latest
     needs: debug-inputs
     steps:
@@ -108,8 +102,6 @@ jobs:
           rm start.sh || true
 
   check-build-is-correct:
-    permissions:
-      contents: read
     runs-on: ubuntu-latest
     needs: [debug-inputs]
     steps: