diff --git a/.github/workflows/publish_release.yaml b/.github/workflows/publish_release.yaml
index 2816d6b3..37d0dc28 100644
--- a/.github/workflows/publish_release.yaml
+++ b/.github/workflows/publish_release.yaml
@@ -9,6 +9,7 @@ jobs:
   buildAndPublish:
     name: Publish to PyPi
     permissions:
+      contents: read
       id-token: write
     environment: production
     runs-on: ubuntu-latest