diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f91506a..2586fc3 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -172,6 +172,7 @@ jobs:
     runs-on: ${{ vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
     needs: docs-build
     permissions:
+      actions: read
       pages: write
       id-token: write
       contents: write