diff --git a/.github/workflows/cdeploy.yml b/.github/workflows/cdeploy.yml
index c7b1854..34106db 100644
--- a/.github/workflows/cdeploy.yml
+++ b/.github/workflows/cdeploy.yml
@@ -1,5 +1,10 @@
 name: CDeploy
 
+# CDeploy workflow for deploying the latest successful CDelivery package to EC2
+permissions:
+  actions: read
+  contents: read
+
 # Manual deployment trigger
 on:
   workflow_dispatch: