diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index be9164436..90b53a196 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,6 +13,8 @@ on:
   schedule:
     - cron: '11 15 * * 0' # Sundays, 15:11
 
+permissions: {}
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true