diff --git a/.github/workflows/ci-docker.yml b/.github/workflows/ci-docker.yml
index 7f93769..2919999 100644
--- a/.github/workflows/ci-docker.yml
+++ b/.github/workflows/ci-docker.yml
@@ -8,6 +8,9 @@ on:
 env:
   GHCR_IMAGE_NAME: ghcr.io/blinklabs-io/cdnsd
 
+permissions:
+  content: read
+
 jobs:
   docker:
     runs-on: ubuntu-latest