diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index 6c8ead330..ae29bccee 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -19,6 +19,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions:
+  # Required: allow read access to the content for analysis.
+  contents: read
+
 jobs:
   changes:
     outputs: