diff --git a/.github/workflows/sqlite.yml b/.github/workflows/sqlite.yml
index a145ddc..9b1573e 100644
--- a/.github/workflows/sqlite.yml
+++ b/.github/workflows/sqlite.yml
@@ -20,6 +20,8 @@ on:
       - 'psalm.xml'
 
 name: sqlite
+permissions:
+  contents: read
 
 jobs:
   phpunit: