diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 94174698..42901e3e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,6 +44,8 @@ jobs:
     name: Node.js SDK
     needs: [changed-sdks]
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     defaults:
       run:
         working-directory: ./