diff --git a/.github/workflows/js-test.yml b/.github/workflows/js-test.yml
index 4a5ed462..288b7c3b 100644
--- a/.github/workflows/js-test.yml
+++ b/.github/workflows/js-test.yml
@@ -12,7 +12,8 @@ on:
     paths:
       - 'js/**'
       - '.github/workflows/**'
-
+permissions:
+  contents: read
 jobs:
   unit-testing:
     strategy: