diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 6bd890fab..9bf9f4724 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -16,6 +16,10 @@ on:
 env:
   RUST_BACKTRACE: short
   RUSTFLAGS: -Cdebuginfo=1
+
+permissions:
+  contents: read
+
 jobs:
   build:
     strategy: