diff --git a/.github/workflows/release-pipeline.yml b/.github/workflows/release-pipeline.yml
index f480265..2b4c7da 100644
--- a/.github/workflows/release-pipeline.yml
+++ b/.github/workflows/release-pipeline.yml
@@ -48,6 +48,8 @@ concurrency:
 jobs:
   ci:
     uses: braintree/web-sdk-github-actions/.github/workflows/ci.yml@cf4b40ff4b46c96aadbfae38806b8de404a98cb3
+    permissions:
+      contents: read
     with:
       lint-command: ${{ inputs.lint-command }}
       test-command: ${{ inputs.test-command }}