diff --git a/.github/workflows/fuzz.yaml b/.github/workflows/fuzz.yaml
index 7ee6c22a..f8c72c97 100755
--- a/.github/workflows/fuzz.yaml
+++ b/.github/workflows/fuzz.yaml
@@ -1,5 +1,8 @@
 name: Fuzzing
 on: [push, pull_request]
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Fuzzing