diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 24cf93fcc4..1ffc29eef5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,6 +34,7 @@ defaults:
 
 jobs:
   merge_queue_skipper:
+    permissions: 'read-all'
     name: 'Merge Queue Skipper'
     runs-on: 'gemini-cli-ubuntu-16-core'
     outputs: