diff --git a/.github/workflows/auto-import.yml b/.github/workflows/auto-import.yml
index 07a9321e8..0b041c5bd 100644
--- a/.github/workflows/auto-import.yml
+++ b/.github/workflows/auto-import.yml
@@ -6,6 +6,9 @@ on:
         description: 'Log level'     
         required: true
         default: 'warning'
+permissions:
+  contents: read
+
 jobs:
   backup:
     environment: Heroku-DB-Backup