diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d764fc6..c6f94b8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,3 +18,5 @@ jobs:
   config:
     name: "🔍 Check Renovate"
     uses: ./.github/workflows/renovate-config-validator.yml
+    permissions:
+      contents: read