diff --git a/.github/workflows/check_ed.yml b/.github/workflows/check_ed.yml
index 09100e8..7485b62 100644
--- a/.github/workflows/check_ed.yml
+++ b/.github/workflows/check_ed.yml
@@ -14,6 +14,8 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   tests:
     runs-on: ${{ matrix.os }}