diff --git a/.github/workflows/conda-package.yml b/.github/workflows/conda-package.yml
index 0c5bd0b..43f5129 100644
--- a/.github/workflows/conda-package.yml
+++ b/.github/workflows/conda-package.yml
@@ -2,6 +2,8 @@ name: Conda package
 
 on: push
 
+permissions: read-all
+
 env:
   PACKAGE_NAME: mkl_umath
   MODULE_NAME: mkl_umath