diff --git a/.github/workflows/license-checker.yml b/.github/workflows/license-checker.yml
index 26df6cbf58ce..b44f1bf92b2d 100644
--- a/.github/workflows/license-checker.yml
+++ b/.github/workflows/license-checker.yml
@@ -18,6 +18,9 @@
 #
 name: License checker
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [master, 'release/**']