diff --git a/.github/workflows/manage-github-repositories.yml b/.github/workflows/manage-github-repositories.yml
index 317417f..2fc8425 100644
--- a/.github/workflows/manage-github-repositories.yml
+++ b/.github/workflows/manage-github-repositories.yml
@@ -1,5 +1,7 @@
 ---
 name: Manage github repositories
+permissions:
+  contents: read
 
 "on":
   workflow_dispatch: