diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d6d6200..5a11006 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -45,6 +45,7 @@ jobs:
     name: GitHub Packages
     uses: ./.github/workflows/_publish.yml
     permissions:
+      contents: read
       packages: write
     needs: build
     with: