diff --git a/.github/workflows/mssql.yml b/.github/workflows/mssql.yml
index bd53406..3478032 100644
--- a/.github/workflows/mssql.yml
+++ b/.github/workflows/mssql.yml
@@ -17,6 +17,8 @@ on:
       - 'phpunit.xml.dist'
 
 name: mssql
+permissions:
+  contents: read
 
 jobs:
   tests: