diff --git a/.github/workflows/pr-file-check.yml b/.github/workflows/pr-file-check.yml
index 64b434408446..ad2585e6ffea 100644
--- a/.github/workflows/pr-file-check.yml
+++ b/.github/workflows/pr-file-check.yml
@@ -10,6 +10,7 @@ on:
       - 'unlabeled'
 
 permissions:
+  contents: read
   pull-requests: write
 
 jobs: