diff --git a/.github/workflows/callable-pull-request.yaml b/.github/workflows/callable-pull-request.yaml
index 0b3b7efc..218c5cfa 100644
--- a/.github/workflows/callable-pull-request.yaml
+++ b/.github/workflows/callable-pull-request.yaml
@@ -129,6 +129,7 @@ jobs:
   lint:
     permissions:
       pull-requests: read
+      contents: read
     uses: ./.github/workflows/callable-lint.yaml
     secrets: inherit