diff --git a/.github/workflows/translation-sync.yml b/.github/workflows/translation-sync.yml
index 33cb954b..6c3de032 100644
--- a/.github/workflows/translation-sync.yml
+++ b/.github/workflows/translation-sync.yml
@@ -13,6 +13,9 @@ on:
       - "pages/src/content/docs/**"
       - "scripts/github-actions/check-translation-sync.*"
 
+permissions:
+  contents: read
+
 jobs:
   translation-sync:
     runs-on: self-hosted