diff --git a/.github/workflows/website-tests.yaml b/.github/workflows/website-tests.yaml
index f8ed1c56..f12d402a 100644
--- a/.github/workflows/website-tests.yaml
+++ b/.github/workflows/website-tests.yaml
@@ -12,6 +12,9 @@ on:
       - "website/**"
       - ".github/workflows/website-tests.yaml"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test & Coverage