diff --git a/.github/workflows/translation-sync.yml b/.github/workflows/translation-sync.yml
index 3268414d..1f2498f9 100644
--- a/.github/workflows/translation-sync.yml
+++ b/.github/workflows/translation-sync.yml
@@ -5,7 +5,8 @@ on:
     - cron: '0 2 * * *'
   workflow_dispatch:
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   sync: