diff --git a/.github/workflows/axe.yml b/.github/workflows/axe.yml
index afa3c922..4e6d25f2 100644
--- a/.github/workflows/axe.yml
+++ b/.github/workflows/axe.yml
@@ -1,5 +1,8 @@
 name: Axe accessibility testing
 
+permissions:
+  contents: read
+
 on:
   # if you want to run this on every push uncomment the following lines
   # push: