diff --git a/README.md b/README.md
index c0911bb..6829f98 100644
--- a/README.md
+++ b/README.md
@@ -167,6 +167,7 @@ jobs:
     permissions:
       id-token: write
       packages: write
+      contents: read
       attestations: write
     env:
       REGISTRY: ghcr.io