diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5aa8ae7b7172d7..f09f5192d24538 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -5,6 +5,7 @@ on: [pull_request, push]
 permissions:
   contents: read # Fetch code (actions/checkout)
   packages: write # Upload and publish packages to GitHub Packages
+  actions: read
 
 jobs:
   build: