diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml
index da55a348d..b1c9403d5 100644
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@@ -22,6 +22,7 @@ concurrency:
   cancel-in-progress: true
 
 permissions:
+  contents: read
   pull-requests: read
   actions: read