diff --git a/.github/workflows/shared-go-auto-release.yml b/.github/workflows/shared-go-auto-release.yml
index a2ea061b..86e7bd17 100644
--- a/.github/workflows/shared-go-auto-release.yml
+++ b/.github/workflows/shared-go-auto-release.yml
@@ -59,7 +59,8 @@ on:
         description: Tag exists so skip new release issue
         value: ${{ jobs.publish.outputs.exists }}
 
-permissions: {}
+permissions:
+  content: read
 
 jobs:
   draft: