diff --git a/.github/workflows/directory.yml b/.github/workflows/directory.yml
index a5cb52fa7..a6f8cb3fe 100644
--- a/.github/workflows/directory.yml
+++ b/.github/workflows/directory.yml
@@ -68,6 +68,10 @@ jobs:
 
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      packages: read
+
     needs: build
 
     if: github.event_name == 'push'