diff --git a/.github/workflows/meson.yml b/.github/workflows/meson.yml
index 8edad33..d85e876 100644
--- a/.github/workflows/meson.yml
+++ b/.github/workflows/meson.yml
@@ -6,6 +6,9 @@ concurrency:
   group: ${{github.workflow}}-${{github.head_ref}}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   Linux-GCC:
     runs-on: ubuntu-22.04