diff --git a/.github/workflows/flux-diff.yaml b/.github/workflows/flux-diff.yaml
index d08d9c91..46239543 100644
--- a/.github/workflows/flux-diff.yaml
+++ b/.github/workflows/flux-diff.yaml
@@ -11,6 +11,7 @@ jobs:
     name: Flux Diff
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: write
     strategy:
       matrix: