diff --git a/.github/workflows/Deploy.yml b/.github/workflows/Deploy.yml
index 00339af..9d7ec3f 100644
--- a/.github/workflows/Deploy.yml
+++ b/.github/workflows/Deploy.yml
@@ -1,4 +1,6 @@
 name: Build and push Docker image
+permissions:
+  contents: read
 
 on:
   push: