diff --git a/.github/workflows/update-templates.yml b/.github/workflows/update-templates.yml
index 967f533d06c8..9c3c89c49934 100644
--- a/.github/workflows/update-templates.yml
+++ b/.github/workflows/update-templates.yml
@@ -11,6 +11,9 @@ env:
   GIT_COMMITTER_EMAIL: 94923726+googleforcreators-bot@users.noreply.github.com
   GIT_COMMITTER_NAME: googleforcreators-bot
 
+permissions:
+  contents: read
+
 jobs:
   update-template:
     name: Migrate templates and text sets