diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index f1c729934..b492877aa 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -2,7 +2,8 @@ name: Run checks
 
 on: [push]
 
-permissions: read
+permissions:
+  contents: read
 
 env:
   NOTIFY_ENVIRONMENT: test