diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ee2be155..c8ccd629 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,10 +1,19 @@
 name: Build
 run-name: ${{ github.actor }} is testing out github actions
 permissions:
-  contents: write
-  pages: write
+  contents: read
+  pages: read
   id-token: write
-  repository-projects: write
+  actions: read
+  checks: read
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: read
+  statuses: read
 
 on: [push, workflow_dispatch]
 jobs: