diff --git a/.github/workflows/chart-preview.yml b/.github/workflows/chart-preview.yml
index 7b45d60f..a5b45f64 100644
--- a/.github/workflows/chart-preview.yml
+++ b/.github/workflows/chart-preview.yml
@@ -14,6 +14,9 @@ on:
         default: false
         type: boolean
 
+permissions:
+  contents: read
+
 env:
   PREVIEW_BUILD_FOLDER: helm-preview
   AWS_ACCESS_KEY_ID: ${{ secrets.HELM_PREVIEW_AWS_ACCESS_KEY_ID }}