diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index 9341181..5bc2917 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -9,6 +9,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  actions: read
   contents: read
 
 jobs: