diff --git a/.github/workflows/build-xserver.yml b/.github/workflows/build-xserver.yml
index 417db1bfd..d86ebb379 100644
--- a/.github/workflows/build-xserver.yml
+++ b/.github/workflows/build-xserver.yml
@@ -1,5 +1,8 @@
 name: Build X servers
 
+permissions:
+    contents: read
+
 env:
     MESON_BUILDDIR:  "build"
     X11_PREFIX:      /home/runner/x11