diff --git a/.github/workflows/check-links.yml b/.github/workflows/check-links.yml
index c75398a..1a37205 100644
--- a/.github/workflows/check-links.yml
+++ b/.github/workflows/check-links.yml
@@ -3,6 +3,8 @@ name: Check links
 
 on: [push, pull_request]
 
+permissions: read-all
+
 jobs:
   markdown-link-check:
     name: Check links using markdown-link-check