diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d1dbf96..c585169 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -6,6 +6,7 @@ on:
   pull_request:
 
 permissions:
+  actions: read
   contents: read
   packages: read
   pull-requests: write
@@ -67,4 +68,4 @@ jobs:
           csharp="$(jq -c '[.[] + {lang:"csharp"}]' <<<"${CSHARP_STATUS:-[]}")"
           scala="$(jq -c '[.[] + {lang:"scala"}]' <<<"${SCALA_STATUS:-[]}")"
           merged="$(jq -cn --argjson a "$csharp" --argjson b "$scala" '$a + $b')"
-          echo "matrix-data=$merged" >> "$GITHUB_OUTPUT"
+          echo "matrix-data=$merged" >> "$GITHUB_OUTPUT"
\ No newline at end of file