diff --git a/.github/workflows/generate-preview-links.yml b/.github/workflows/generate-preview-links.yml
index 3a0c780db4acb..bb1271b9d863d 100644
--- a/.github/workflows/generate-preview-links.yml
+++ b/.github/workflows/generate-preview-links.yml
@@ -4,6 +4,9 @@ on:
   pull_request_target:
     types: [opened, synchronize, reopened]
 
+permissions:
+  contents: read
+
 jobs:
   preview_link_generator_job:
     name: Generate preview link table