diff --git a/.github/workflows/composer-require-checker.yml b/.github/workflows/composer-require-checker.yml
index a68facf..be28d81 100644
--- a/.github/workflows/composer-require-checker.yml
+++ b/.github/workflows/composer-require-checker.yml
@@ -23,6 +23,8 @@ on:
       - 'psalm.xml'
 
 name: Composer require checker
+permissions:
+  contents: read
 
 jobs:
   composer-require-checker: