diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 3c2b073852..6b1460e9ad 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -69,6 +69,9 @@ jobs:
     name: 'E2E Checks'
     needs: ['build-and-publish', 'get-vars']
     uses: './.github/workflows/e2e.yml'
+    permissions:
+      contents: 'read'
+      packages: 'read'
     with:
       version: '${{ needs.build-and-publish.outputs.version }}'
       cli-package-name: '${{ needs.get-vars.outputs.cli-package-name }}'