diff --git a/README.md b/README.md
index 5041282..c6b3845 100644
--- a/README.md
+++ b/README.md
@@ -99,12 +99,13 @@ with:
   jwtTtl: 3600 # 1 hour, default value
 ```
 
-**Notice:** In order for Github provided JWT to work workflow should have `id-token: write` specified in the `permissions` section  of a workflow
+**Notice:** In order for Github provided JWT to work workflow should have `id-token: write` & `contents: read` specified in the `permissions` section  of a workflow
 
 ```yaml
 ...
 permissions:
   id-token: write
+  contents: read
 ...
 ```