diff --git a/.github/workflows/build-pipeline.yml b/.github/workflows/build-pipeline.yml
index 9233b18..f9bdcbd 100644
--- a/.github/workflows/build-pipeline.yml
+++ b/.github/workflows/build-pipeline.yml
@@ -1,5 +1,7 @@
 # GitHub CI build pipeline
 name: basic_data_handling CI build
+permissions:
+  contents: read
 
 on:
   pull_request: