diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e90dd76c2c..5fae1481c7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,6 +8,10 @@ on:
 env:
   PKG_NAME: "boundary"
 
+permissions:
+  contents: read
+  actions: write
+
 jobs:
   set-product-version:
     runs-on: ${{ fromJSON(vars.BUILDER_LINUX) }}