diff --git a/README.md b/README.md
index d44d27f..c0911bb 100644
--- a/README.md
+++ b/README.md
@@ -112,6 +112,7 @@ jobs:
   build:
     permissions:
       id-token: write
+      contents: read
       attestations: write
 
     steps: