diff --git a/.github/workflows/build-release.yaml b/.github/workflows/build-release.yaml
index ffec70b..258242d 100644
--- a/.github/workflows/build-release.yaml
+++ b/.github/workflows/build-release.yaml
@@ -15,6 +15,7 @@ on:
 jobs:
   update-packagejson:
     permissions:
+      actions: read
       contents: write
     uses: Cysharp/Actions/.github/workflows/update-packagejson.yaml@main
     with: