diff --git a/README.md b/README.md
index 2a30ad0..725ba78 100644
--- a/README.md
+++ b/README.md
@@ -22,6 +22,9 @@ template to get started:
 ```yaml
 name: pre-commit
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   push: