diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
index ea7e6a49..08ccbe0d 100644
--- a/.github/workflows/gosec.yml
+++ b/.github/workflows/gosec.yml
@@ -1,5 +1,6 @@
 name: CI gosec
-permissions: {}
+permissions:
+  actions: read
 on:
   push:
     branches: [ "*" ]