diff --git a/.github/workflows/pull-request-main.yml b/.github/workflows/pull-request-main.yml
index 0665ac03..7a612dff 100644
--- a/.github/workflows/pull-request-main.yml
+++ b/.github/workflows/pull-request-main.yml
@@ -32,6 +32,8 @@ jobs:
 
   ci-lint-misc:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: ci-lint-misc
         uses: smartcontractkit/.github/actions/ci-lint-misc@01d931b0455a754d12e7143cc54a5a3521a8f6f6 # ci-lint-misc@0.1.4