diff --git a/.github/workflows/slack-lite.yml b/.github/workflows/slack-lite.yml
index db8191e21a..83d02030ff 100644
--- a/.github/workflows/slack-lite.yml
+++ b/.github/workflows/slack-lite.yml
@@ -22,6 +22,9 @@ on:
   pull_request_target:
     types: [opened, ready_for_review, reopened, closed]
 
+permissions:
+  contents: read
+
 jobs:
   slack-lite:
     # Skip notification if: