diff --git a/.github/workflows/test-harness.yml b/.github/workflows/test-harness.yml
index 9eb3c9e..268f925 100644
--- a/.github/workflows/test-harness.yml
+++ b/.github/workflows/test-harness.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   harness-tests:
     name: Harness Tests
+    permissions:
+      contents: read
     runs-on:
       labels: ubuntu-latest-4-core
     steps: