diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index da587a0d..9d53fe03 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -53,6 +53,8 @@ jobs:
         retention-days: 30
 
   test-docker-playwright:
+    permissions:
+      contents: read
     timeout-minutes: 15
     runs-on: ubuntu-latest
     steps: