diff --git a/.github/workflows/opentelemetry.yml b/.github/workflows/opentelemetry.yml
index b2ec57de2..31c1b24d4 100644
--- a/.github/workflows/opentelemetry.yml
+++ b/.github/workflows/opentelemetry.yml
@@ -7,6 +7,9 @@
         - ci
       types: [completed]
 
+permissions:
+  contents: read
+
   jobs:
     otel-export-trace:
       runs-on: ubuntu-latest